Calling composer with "update" instead of "install" should update the versions referenced in the composer.lock file, instead of blindly trying to install them, leading to conflicts.