Don't lock Composer dependencies