Bump composer/composer from 2.8.2 to 2.8.4

[dependabot]

Bumps composer/composer from 2.8.2 to 2.8.4.

Release notes

Sourced from composer/composer's releases.

2.8.4

• Fixed exit code of the audit command not being meaningful (now 1 for vulnerabilities and 2 for abandoned, 3 for both) (#12203)
• Fixed issue on plugin upgrade when it defines multiple classes (#12226)
• Fixed duplicate errors appearing in the output depending on php settings (#12214)
• Fixed InstalledVersions returning duplicate data in some instances (#12225)
• Fixed installed.php sorting to be deterministic (#12197)
• Fixed bump-after-update failing when using inline constraints (#12223)
• Fixed create-project command to now disable symlinking when used with a path repo as argument (#12222)
• Fixed validate --no-check-publish to hide publish errors entirely as they are irrelevant (#12196)
• Fixed audit command returning a failing code when composer audit fails as this should not trigger build failures, but running audit as standard part of your build is probably a terrible idea anyway (#12196)
• Fixed curl usage to disable multiplexing on broken versions when proxies are in use (#12207)

Full Changelog: composer/composer@2.8.3...2.8.4

2.8.3

• Fixed windows handling of process discovery (#12180)
• Fixed react/promise requirement to allow 2.x installs again (#12188)
• Fixed some issues when lock:false is set in require and bump commands

Full Changelog: composer/composer@2.8.2...2.8.3

Changelog

Sourced from composer/composer's changelog.

[2.8.4] 2024-12-11

• Fixed exit code of the audit command not being meaningful (now 1 for vulnerabilities and 2 for abandoned, 3 for both) (#12203)
• Fixed issue on plugin upgrade when it defines multiple classes (#12226)
• Fixed duplicate errors appearing in the output depending on php settings (#12214)
• Fixed InstalledVersions returning duplicate data in some instances (#12225)
• Fixed installed.php sorting to be deterministic (#12197)
• Fixed bump-after-update failing when using inline constraints (#12223)
• Fixed create-project command to now disable symlinking when used with a path repo as argument (#12222)
• Fixed validate --no-check-publish to hide publish errors entirely as they are irrelevant (#12196)
• Fixed audit command returning a failing code when composer audit fails as this should not trigger build failures, but running audit as standard part of your build is probably a terrible idea anyway (#12196)
• Fixed curl usage to disable multiplexing on broken versions when proxies are in use (#12207)

[2.8.3] 2024-11-17

• Fixed windows handling of process discovery (#12180)
• Fixed react/promise requirement to allow 2.x installs again (#12188)
• Fixed some issues when lock:false is set in require and bump commands

Commits

• 112e37d Release 2.8.4
• 1175bf5 Update changelog
• 6e0cb6c Fix tests
• 8eedfd0 Hide publish errors entirely with --no-check-publish instead of downgrading t...
• 99430ca Avoid returning failing status code if the composer audit fails in diagnose c...
• ace7a3f Update deps
• 144e8f8 Fix create-project when passed with a path repo to disable symlinks by default
• 6a9336f Merge pull request #12233 from Seldaek/fix_duplicates
• 45436c0 Fixed InstalledVersions returning duplicates in some instances
• a383632 Merge pull request #12230 from Seldaek/duplicate_errors
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coveralls]

Pull Request Test Coverage Report for Build 12288177956

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 89.508%

---

Totals
Change from base Build 12268520196:	0.0%
Covered Lines:	546
Relevant Lines:	610

---

💛 - Coveralls