composer update for app deps