composer dependencies bump