composer.lock commit