Updates lock to remove non composer json deps