Update composer/semver requirement to ^1.4 || ^2 || ^3

[dependabot]

Updates the requirements on composer/semver to permit the latest version.

Release notes

Sourced from composer/semver's releases.

3.0.0

• Break: Renamed EmptyConstraint, replace it with MatchAllConstraint
• Break: Unlikely to affect anyone but strictly speaking a breaking change, *.* and such variants will not match all dev-* versions anymore, only * does
• Break: ConstraintInterface is now considered internal/private and not meant to be implemented by third parties anymore
• Added Intervals class to check if a constraint is a subsets of another one, and allow compacting complex MultiConstraints into simpler ones
• Added CompilingMatcher class to speed up constraint matching against simple Constraint instances
• Added MatchAllConstraint and MatchNoneConstraint which match everything and nothing
• Added more advanced optimization of contiguous constraints inside MultiConstraint
• Added tentative support for PHP 8
• Fixed ConstraintInterface::matches to be commutative in all cases

Changelog

Sourced from composer/semver's changelog.

[3.0.0] 2020-05-26

• Break: Renamed EmptyConstraint, replace it with MatchAllConstraint
• Break: Unlikely to affect anyone but strictly speaking a breaking change, *.* and such variants will not match all dev-* versions anymore, only * does
• Break: ConstraintInterface is now considered internal/private and not meant to be implemented by third parties anymore
• Added Intervals class to check if a constraint is a subsets of another one, and allow compacting complex MultiConstraints into simpler ones
• Added CompilingMatcher class to speed up constraint matching against simple Constraint instances
• Added MatchAllConstraint and MatchNoneConstraint which match everything and nothing
• Added more advanced optimization of contiguous constraints inside MultiConstraint
• Added tentative support for PHP 8
• Fixed ConstraintInterface::matches to be commutative in all cases

[2.0.0] 2020-04-21

• Break: dev-master, dev-trunk and dev-default now normalize to dev-master, dev-trunk and dev-default instead of 9999999-dev in 1.x
• Break: Removed the deprecated AbstractConstraint
• Added getUpperBound and getLowerBound to ConstraintInterface. They return Composer\Semver\Constraint\Bound instances
• Added MultiConstraint::create to create the most-optimal form of ConstraintInterface from an array of constraint strings

[1.5.1] 2020-01-13

• Fixed: Parsing of aliased version was not validating the alias to be a valid version

[1.5.0] 2019-03-19

• Added: some support for date versions (e.g. 201903) in ~ operator
• Fixed: support for stabilities in ~ operator was inconsistent

[1.4.2] 2016-08-30

• Fixed: collapsing of complex constraints lead to buggy constraints

[1.4.1] 2016-06-02

• Changed: branch-like requirements no longer strip build metadata - composer/semver#38.

[1.4.0] 2016-03-30

• Added: getters on MultiConstraint - composer/semver#35.

[1.3.0] 2016-02-25

• Fixed: stability parsing - composer/composer#1234.
• Changed: collapse contiguous constraints when possible.

[1.2.0] 2015-11-10

• Changed: allow multiple numerical identifiers in 'pre-release' version part.
• Changed: add more 'v' prefix support.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[schlessera]

Needs fixing via #240