Composer packages changed, even though same version used
composer update without any argument tries to update everything.

If you want to use the packages specified in composer.lock, run composer install instead.