I don't usually develop PHP; how can I update composer.lock?

I solved this by creating update.sh in my scraper repo and running it.

#!/bin/bash
if [ -e /.dockerenv ]; then
    if [ ! -e /app/.heroku ]; then
        herokuish buildpack build
    fi
    export PATH=/app/.heroku/php/bin/:$PATH
    cd /app
    composer update
else
    docker run -it -v ${PWD}:/app openaustralia/buildstep:early_release bash -x /app/update.sh
    sudo chown -R $(id -u):$(id -g) .
fi