update the pubspec.lock