Bump dev dependency composer/spdx-licenses to 1.2.0