Composer Updates

Using `*` is a bad practice. Using proper version constraints is far preferable.