composer: updates in curl/api