Update and lock framework test dependencies

This updates the framework testing dependencies, and this locking of dependencies should be better than the previous way of specifying less than half of the exact versions in the composer.json.