updated composer json/lock