optional (suggest) dependencies are now included with require-dev (installed by default unless you specify composer --no-dev)
As suggested by Jordi himself, just commit composer.lock