upgrade composer.json