update composer lock file