update composer.json dep versions