composer.json dependency fix for required versions