updated composer.json

What does this MR do?

updates all minor changes and patches to our direct composer dependencies (also for dev)

How confident are you it won't break things if deployed?

looks good to me. tested locally visually

Checklist

• added a test, or explain why one is not needed/possible...
• no unrelated changes
• asked someone for a code review
• joined #foodsharing-beta channel at https://slackin.yunity.org
• added an entry to CHANGELOG.md (description, merge request link, username(s))