chore(deps): update PHP dependencies

[phil-davis]

Updates PHP dependencies to the latest minor/patch release versions.

The requirements in the composer.json files have also been update to reflect the current minor version number of each dependency. That is what we test with, so we may as well require it to be sure that all developers/users are using at least that minor release.

roave/security-advisories now has a security advisory for symfony/polyfill-intl-idn. It wants at least the current release 1.38.1. But symfony/polyfill-intl-idn is in the "replace" section of composer.json with a wildcard. Even though we do not use it, the version has been updated to 1.38.1 in the replace section to stop roave/security-advisories from complaining.

[phil-davis]

My local output of composer update before this change was:

$ composer update
[bamarni-bin] The setting "extra.bamarni-bin.forward-command" will be set to "true" from 2.x onwards. If you wish to keep it to "false", you need to set it explicitly.
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - owncloud/core is present at version dev-master and cannot be modified by Composer
    - Root composer.json requires roave/security-advisories dev-latest -> satisfiable by roave/security-advisories[dev-latest].
    - roave/security-advisories dev-latest conflicts with symfony/polyfill-intl-idn >=1.17.1,<1.38.1 (owncloud/core dev-master replaces symfony/polyfill-intl-idn *).

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.