fixed composer versions