執行了 composer update 以後，發現會出現安全性警告：
Problem 1
- Root composer.json requires phpunit/phpunit ^11.5, found phpunit/phpunit[11.5.0, ..., 11.5.55] but these were not loaded, because they are affected by security advisories ("PKSA-5jz8-6tcw-pbk4", "PKSA-z3gr-8qht-p93v").....看了 composer v2.9.0 release notes 才知道有這個功能。
感覺可以在 actions 裡面加個檢查。
ps. v2.9.2 中可以使用 -no-security-blocking 參數暫時關閉安全檢查