composer update --lock