update composer dependencies to fix cacert.pem issue in guzzle
when packaging a phar