Composer updates

Wildcard version constraints are a bad practice. I've selected what I think is a suitable version constraint.