Lock file is not updated in at least one scenario

[localheinz]

Steps required to reproduce the problem

1. Require localheinz/composer-normalize

   $ composer global require localheinz/composer-normalize:0.9.0
   

2. Clone https://github.com/Jan0707/phpstan-prophecy:

   $ git clone [email protected]:Jan0707/phpstan-prophecy.git
   

3. Apply composer normalize to phpstan-prophecy

   $ cd phpstan-prophecy
   $ composer normalize
   

4. Validate composer.json

   $ composer validate
   

Expected Result

• Validation passes

Actual Result

• Validation fails (as composer.lock has not been updated).

💁‍♂️ Not sure what is wrong, running

$ composer update --lock

works (of course), but triggering the update from within the NormalizeCommand fails (at least for this project).