versions in composer dependencies