update composer.json with minimum stability