What kind of package is trying to be updated from composer? Sounds like it’s a custom repo of some kind. As zip isn’t needed for most composer packages, that would probably why it isn’t a default Ubuntu package.
You can instruct trellis to install it using what I posted on a different thread: Trellis good practice suggestions for ongoing maintenance