Bump dependencies.
Blacklist the composer repositories.