Use more restictive dependencies versions

PHPCS checks now fail because code sniffer automatically switches from 1.x branch to 2.x. I'm proposing to use more restrictive versions for composer dependencies to avoid such problems in the future.