Update composer.json

Require-dev only affects this project, and not those that require it, so we don't care about 3.7.