Update dependency composer/composer to v2.10.3 (Latest)

[renovate]

This PR contains the following updates:

Package	Update	Change
composer/composer	patch	2.10.2 → 2.10.3

---

Release Notes

composer/composer (composer/composer)

v2.10.3

Compare Source

• Security: Validate package bin paths against path traversal using symlinks (GHSA-96h3-5x6v-m776, CVE-2026-59944)
  • Security: Fixed command injection via malicious Perforce url (GHSA-rvx4-ffvw-m9q3)
  • Security: Sanitize URL-embedded usernames/token in a few more places (#​13044)
  • Security: Fixed matching of gitlab URLs to avoid possible credential leak to the wrong domain (#​12988)
  • Fixed PHP 8.6 deprecation warnings (#​12967, #​13028)
  • Fixed error output when a policy blocks a package version to be clearer (#​12993)
  • Fixed the lock file's content-hash with a conflict marker ending up breaking at runtime (#​13048)
  • Fixed possible race condition while creating directories like the cache dir when running multiple Composer processes in parallel (#​12977)
  • Fixed forgejo support to handle empty repositories better (#​12968)
  • Fixed FilterListApiClient not forwarding transport options (#​13040)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.