composer lock update.