composer: release hardlock for minor version

It's better to lock down major version, not minor. Before, Nette 2.3 could not be used.