composer & dependency update