Stable version constraints for all dependencies

Also update dependency specs in composer.lock
Merge pull request #996 from tommygnr/stable-deps

Stable version constraints for all dependencies