Use composer's new --update-no-dev option