fix version constraint in composer.json