composer update lock