2.11.1 - released 2026-10-30

Changelog

Added a warning when the cache dir is on a Windows drive while running in WSL, as this makes filesystem operations very slow (#13175)
Fixed GitLab CI job tokens failing to authenticate against the GitLab Composer package registry, which requires HTTP Basic auth rather than the JOB-TOKEN header (#13180)
Fixed every update aborting with a SecurityException when a PHP extension reports a name that is not a valid platform package name (#13184)
Fixed require and remove dropping empty require/require-dev/repositories keys from composer.json when the command had not emptied them itself (#13178)
Fixed a PHP 8.6 deprecation warning from composer/ca-bundle (8bf8c27)
Fixed invalid custom-headers auth entries being sent as-is, they are now ignored with a warning (#13181)