Calling composer with "update" instead of "install" should update the versions...

Calling composer with "update" instead of "install" should update the versions referenced in the composer.lock file, instead of blindly trying to install them, leading to conflicts.