Update composer.json

bump deps