Update composer.json

Should we loosen these dependencies?