add --prefer-lowest and --prefer-stable to update command

Run `composer update --prefer-lowest-stable` and get all the deps installed to their lowest (pretended) supported version

Fixes #3440
Fixes #1902