Set dist reference to a reference and not version, fixes composer/composer#1947
Update deps