Merge pull request #13933 from nextcloud/ci/noid/fix-roave-package

fix(dependencies): Always install newest roave/security-advisories on CI

.github/workflows/psalm.yml

@@ -40,5 +40,8 @@ jobs:
       - name: Install dependencies
         run: composer i
 
+      - name: Check for vulnerable PHP dependencies
+        run: composer require --dev roave/security-advisories:dev-latest
+
       - name: Run coding standards check
         run: composer run psalm

composer.json

@@ -34,15 +34,13 @@
 			"composer dump-autoload"
 		],
 		"post-update-cmd": [
-			"@composer bin all update --ansi",
 			"\"vendor/bin/mozart\" compose",
 			"composer dump-autoload"
 		],
 		"test:unit": "vendor/bin/phpunit -c tests/php/phpunit.xml --colors=always --fail-on-warning --fail-on-risky --display-deprecations --display-phpunit-deprecations"
 	},
 	"require-dev": {
-		"nextcloud/ocp": "dev-master",
-		"roave/security-advisories": "dev-latest"
+		"nextcloud/ocp": "dev-master"
 	},
 	"require": {
 		"bamarni/composer-bin-plugin": "^1.8",