Lock composer dependencies to 2.3 alpha