refreshed composer.lock