updates dependency in composer.json