Update composer.json to allow bugfix releases of dependencies

magerun, unless specifically has to, should allow for bugfix releases of dependencies like the now released Symfony 2.4.1.

Bugfix releases include security updates, and rarely ever have non-BC changes (they are bad projects if they do).