composer lock updated