I've made some new upgrades to my Composer Upgrade skill.
I honestly think this one skill is now invaluable. It will perform all your updates, taking into consideration security updates and outdated packages, progressing from minor to major.
It also now works with a script to help with merge conflicts on the lock file. Most AI will do weird things like update the file manually, which won't pass validation. Instead, with this skill it'll do a diff comparison between the two versions and replay all the commands required. It's already saved me a lot of time.
Just install the skill and then prompt it: "Upgrade my PHP packages with /composer-upgrade"