Test using lowest possible dependencies

This is an attempt to use Composer's new `--prefer-lowest` to make sure that the dependency constraints are valid.