set versions for packages in composer.json