updates dependencies in composer.json