Fix composer constraints

Use semantic version constraints and stable releases where possible.