composer.lock: datingvip/curl update