update composer packages
Correct default for form_attributes.required, refs rUSHd5244b4486c9