security: Fix Composer CVE: CVE-2026-59948

[TheWitness]

No description provided.

[ciq-it-service-account]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Copilot]

Pull request overview

Updates the project’s Composer dependency definition to remediate the referenced Composer CVE by bumping composer/composer to a newer patched release and regenerating the lockfile accordingly.

Changes:

• Bump composer/composer requirement from ^2.9.8 to ^2.10.2.
• Regenerate composer.lock to reflect the updated Composer version, including updated source/dist references and metadata.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
src/composer.json	Updates the required composer/composer version constraint to ^2.10.2.
src/composer.lock	Updates the locked composer/composer package version and associated references/metadata after dependency refresh.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.