Update composer deps to be less strict