update dependencies in composer.json