New composer.lock from cms-lib 0.0.2-18-g6a9ff1b