Composer.lock update