adjust doctrine/orm deps in composer.json
bump composer.lock