Bump composer.lock.