Composer 2.11.2 and 2.2.32 fix seven security issues, several via crafted lock files. What changed, how to upgrade CI and Docker, and new options.