Log message:
php-composer: Update to 2.1.5

For full list of upstream release notes please see:
  https://github.com/composer/composer/releases

Log message:
php-composer: Update to 2.0.14

Upstream release notes:
  - Updated composer/xdebug-handler to 2.0 which adds supports for Xdebug 3
  - Fixed handling of inline-update-constraints with references or stability
    flags (#9847)
  - Fixed async processes erroring in an unclear way when they failed to start
    (#9808)
  - Fixed support for the upcoming Symfony 6.0 release when Composer is
    installed as a library (#9896)
  - Fixed progress output missing newlines on PowerShell, and disable progress
    output by default when CI env var is present (#9621)
  - Fixed support for Vagrant/VirtualBox filesystem slowness when installing
    binaries from packages (#9627)
  - Fixed type annotations for the InstalledVersions class
  - Deprecated InstalledVersions::getRawData in favor of
    InstalledVersions::getAllRawData (#9816)

Log message:
php-composer: Update to 2.0.13

Upstream release notes:

 - Security: Fixed command injection vulnerability in HgDriver/HgDownloader and
   hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx /
   CVE-2021-29472)
 - Fixed install step at the end of the init command to take new dependencies
   into account correctly
 - Fixed update --lock listing updates which were not really happening (#9812)
 - Fixed support for --no-dev combined with --locked in outdated and show
   commands (#9788)

Log message:
php-composer: Update to 2.0.12

Upstream release notes:
 - Fixed support for new GitHub OAuth token format (#9757)
 - Fixed support for Vagrant/VirtualBox filesystem slowness by adding short
   sleeps in some places (#9627)
 - Fixed unclear error reporting when a package is in the lock file but not in
   the remote repositories (#9750)
 - Fixed processes silently ignoring the CWD when it does not exist
 - Fixed new Windows bin handling to avoid proxying phar files (#9742)
 - Fixed issue extracting archives into paths that already exist, fixing
   problems with some custom installers (composer/installers#479)
 - Fixed support for branch names starting with master/trunk/default (#9739)
 - Fixed self-update to preserve phar file permissions on Windows (#9733)
 - Fixed detection of hg version when localized (#9753)
 - Fixed git execution failures to also include the stdout output (#9720)

Log message:
Switch to use lang/php/json.mk.

Log message:
php-composer: Update to 2.0.11

Upstream Release Notes:

2.0.11
 - Reverted "Fixed runtime autoloader registration (for plugins and script
   handlers) to prefer the project dependencies over the bundled Composer
   ones" as it caused more problems than expected

2.0.10
 - Added COMPOSER_MAX_PARALLEL_HTTP env var to let people set a lower amount
   of parallel requests if needed
 - Fixed autoloader registration when plugins are loaded, which may impact
   plugins relying on this bug (if you use symfony/flex make sure you upgrade
   it to 1.12.2+ to fix dump-env issues)
 - Fixed exec command suppressing output in some circumstances
 - Fixed Windows/cmd.exe support for script handlers defined as path/to/foo,
   which are now rewritten internally to path\to\foo when needed
 - Fixed bin handling on Windows for PHP scripts, to more closely match
   symlinks and allow @php vendor/bin/foo to work cross-platform
 - Fixed Git for Windows/Git Bash not being detected correctly as an
   interactive shell (regression since 2.0.7)
 - Fixed regression handling some private Bitbucket repository clones
 - Fixed Ctrl-C/SIGINT handling during downloads to correctly abort as soon as
   possible
 - Fixed runtime autoloader registration (for plugins and script handlers) to
   prefer the project dependencies over the bundled Composer ones
 - Fixed numeric default branches being aliased as 9999999-dev internally.
   This alias now only applies to default branches being non-numeric
   (e.g. dev-main)
 - Fixed support for older lib-sodium versions
 - Fixed various minor issues

Log message:
php-composer: Update to 2.0.9

Upstream release notes:
- Added warning if the curl extension is not enabled as it significantly
  degrades performance
- Fixed InstalledVersions to report all packages when several vendor dirs are
  present in the same runtime
- Fixed download speed when downloading large files
- Fixed archive and path repo copies mishandling some .gitignore paths
- Fixed root package classes not being available to the plugins/scripts during
  the initial install
- Fixed cache writes to be atomic and better support multiple Composer
  processes running in parallel
- Fixed preg jit issues when config or require modifies large composer.json
  files
- Fixed compatibility with envs having open_basedir restrictions
- Fixed exclude-from-classmap causing regex issues when having too many paths
- Fixed compatibility issue with Symfony 4/5
- Several small performance and debug output improvements

Log message:
php-composer: Update to 2.0.8

Upstream release Notes:

2.0.8
 - Fixed packages with aliases not matching conflicts which match the alias
 - Fixed invalid reports of uncommitted changes when using non-default remotes
   in vendor dir
 - Fixed curl error handling edge cases
 - Fixed cached git repositories becoming stale by having a git gc applied to
   them periodically
 - Fixed issue initializing plugins when using dev packages
 - Fixed update --lock / mirrors failing to update in some edge cases
 - Fixed partial update with --with-dependencies failing in some edge cases
   with some nonsensical error

2.0.7
 - Fixed detection of TTY mode, made input non-interactive automatically if
   STDIN is not a TTY
 - Fixed root aliases not being present in lock file if not required by
   anything else
 - Fixed remove command requiring a lock file to be present
 - Fixed Composer\InstalledVersions to always contain up to date data during
   installation
 - Fixed status command breaking on slow networks
 - Fixed order of POST_PACKAGE_* events to occur together once all
   installations of a package batch are done

Log message:
php-composer: Update to 2.0.6

Upstream release notes:
- Fixed regression in 2.0.5 dealing with custom installers which do not pass
  absolute paths

Log message:
php-composer: Update to 2.0.5

Upstream release notes:

* Disabled platform-check verification of extensions by default
  (now defaulting php-only), set platform-check to true if you want a complete
  check
* Improved platform-check handling of issue reporting
* Fixed platform-check to only check non-dev requires even if require-dev
  dependencies are installed
* Fixed issues dealing with custom installers which return trailing slashes in
  getInstallPath (ideally avoid doing this as there might be other issues left)
* Fixed issues when curl functions are disabled
* Fixed gitlab-domains/github-domains to make sure if they are overridden the
  default value remains present
* Fixed issues removing/upgrading packages from path repositories on Windows
* Fixed regression in 2.0.4 when handling of git@bitbucket.org URLs in vcs
  repositories
* Fixed issue running create-project in current directory on Windows