composer deps bump