point composer.json to release 4.0.*