Your lock file does not contain a compatible set of packages. Please run composer update. Problem 1 - cyclonedx/cyclonedx-php-composer is locked to version v4.2.0 and an update of this package was not requested. - cyclonedx/cyclonedx-php-composer v4.2.0 requires composer-plugin-api ^2.3 -> found composer-plugin-api[2.2.0] but it does not match the constraint.