update Composer dependencies

make version requirements less strict