composer.lock refreshed