qa: bump dev dependencies, refresh lock

Signed-off-by: George Steel <george@net-glue.co.uk>

composer.json

@@ -37,9 +37,9 @@
         "psr/container": "^1 || ^2"
     },
     "require-dev": {
-        "laminas/laminas-authentication": "^2.13",
+        "laminas/laminas-authentication": "^2.15",
         "laminas/laminas-coding-standard": "~2.5.0",
-        "laminas/laminas-feed": "^2.20",
+        "laminas/laminas-feed": "^2.21",
         "laminas/laminas-filter": "^2.32",
         "laminas/laminas-http": "^2.18",
         "laminas/laminas-i18n": "^2.23",
@@ -52,9 +52,9 @@
         "laminas/laminas-permissions-acl": "^2.15",
         "laminas/laminas-router": "^3.11.1",
         "laminas/laminas-uri": "^2.10",
-        "phpunit/phpunit": "^10.1.3",
+        "phpunit/phpunit": "^10.3.2",
         "psalm/plugin-phpunit": "^0.18.4",
-        "vimeo/psalm": "^5.12"
+        "vimeo/psalm": "^5.15"
     },
     "conflict": {
         "container-interop/container-interop": "<1.2",