composer.lock changed with update.