2.8.9 - released 2025-05-13

Changelog

Fixed json schema issues with version validation (#12376)
Fixed bump-after-update triggering after an update --lock, which makes no sense (#12371)
Fixed zip bomb false positives when unpacking using ZipArchive (#12409)
Fixed creation of empty archives (#12408)
Removed output of script being run when running via composer <script-name> (#12383)

Full Changelog: https://github.com/composer/composer/compare/2.8.8...2.8.9