upgrade composer dependencies