Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires sylius/sylius ~2.1.0 -> satisfiable by sylius/sylius[v2.1.0, ..., v2.1.7]. - sylius/sylius[v2.1.0, ..., v2.1.7] require symfony/http-foundation ^6.4 || ^7.2 -> found symfony/http-foundation[v6.4.0, ..., v6.4.29, v7.2.0, ..., v7.3.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.