Packagist Urges Immediate Composer Update After GitHub Actions Token Leak