composer.json: update vendor