Example run: https://github.com/wp-cli/wp-cli/actions/runs/11992197891/job/33431866704#step:6:108

roave/security-advisories blocks certain versions of symfony/process because of CVE-2024-51736, which means right now composer install fails on PHP 5.6 due to no matching version being found.

symfony/process is required by composer/composer, which is a dependency of wp-cli/package-command.