updated composer.lock for php