Update composer dependencies and lock down versions