Enforce a safe Composer version across your organization

Organizations can now enforce minimum Composer client versions through Private Packagist settings, with three options: allowing all versions, requiring 2.2 LTS or 2.10 latest, or mandating 2.10 only. This addresses supply chain security by ensuring developers and CI systems use Composer versions with current protections against malware and known vulnerabilities. The setting applies organization-wide and will automatically track secure version lines in future updates.