update composer.json with fixed version numbers