fix: peg composer at 2.8.x to avoid security blocking, etc in 2.9 (#4294)

Author: imorland

.github/workflows/REUSABLE_backend.yml

@@ -143,7 +143,7 @@ jobs:
           php-version: ${{ matrix.php }}
           coverage: xdebug
           extensions: ${{ inputs.php_extensions }}
-          tools: phpunit, composer:v2
+          tools: phpunit, composer:2.8
           ini-values: ${{ matrix.php_ini_values }}
 
       # The authentication alter is necessary because newer mysql versions use the `caching_sha2_password` driver,
@@ -197,7 +197,7 @@ jobs:
           php-version: ${{ matrix.php }}
           coverage: xdebug
           extensions: ${{ inputs.php_extensions }}
-          tools: phpunit, composer:v2
+          tools: phpunit, composer:2.8
           ini-values: ${{ matrix.php_ini_values }}
 
       - name: Install Composer dependencies

.github/workflows/REUSABLE_frontend.yml

@@ -147,7 +147,7 @@ jobs:
         with:
           php-version: '8.2'
           extensions: curl, dom, gd, json, mbstring, openssl, pdo_mysql, tokenizer, zip
-          tools: composer:v2
+          tools: composer:2.8
 
       # Needed since tsconfig draws typings from vendor folder.
       - name: Install Composer dependencies