composer lock changes