Composer update: only pull the latest stable symfony/yaml