composer.lock upgraded