bump phabricator version in composer.json

Change-Id: Ia34aa09a585725b71dcb5a922730c58bd9ea3fc5
Merge remote-tracking branch 'upstream/master'