Update composer lock per upstream changes

result of `composer update`

in particular, mailchimp/marketing was needed..but several other
things seem to have been added/changed as well..?