update composer dep version