update composer.json to relax stability requirements