Security update for Core, with self-updated composer