fixed composer deps versions