diff --git a/bucket/composer.json b/bucket/composer.json
index cba4612fa8..9250c9df1b 100644
--- a/bucket/composer.json
+++ b/bucket/composer.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.8.7",
+    "version": "2.8.8",
     "description": "Dependency Manager for PHP",
     "homepage": "https://getcomposer.org/",
     "license": "MIT",
@@ -10,8 +10,8 @@
             "php-nts"
         ]
     },
-    "url": "https://getcomposer.org/download/2.8.7/composer.phar",
-    "hash": "2528507840901565fe6cecd19c7e9f8983b8d91b5eb4bab1599b14254401e675",
+    "url": "https://getcomposer.org/download/2.8.8/composer.phar",
+    "hash": "957263e284b9f7a13d7f475dc65f3614d151b0c4dcc7e8761f7e7f749447fb68",
     "pre_install": [
         "@(",
         "    'if ($args.length -eq 1 -and ($args -eq \"selfupdate\" -or $args -eq \"self-update\")) { & scoop update composer }'",