composer: update lock file