diff --git a/bucket/composer.json b/bucket/composer.json
index 9b335fa202..cba4612fa8 100644
--- a/bucket/composer.json
+++ b/bucket/composer.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.8.6",
+    "version": "2.8.7",
     "description": "Dependency Manager for PHP",
     "homepage": "https://getcomposer.org/",
     "license": "MIT",
@@ -10,8 +10,8 @@
             "php-nts"
         ]
     },
-    "url": "https://getcomposer.org/download/2.8.6/composer.phar",
-    "hash": "becc28b909d2cca563e7caee1e488063312af36b1f2e31db64f417723b8c4026",
+    "url": "https://getcomposer.org/download/2.8.7/composer.phar",
+    "hash": "2528507840901565fe6cecd19c7e9f8983b8d91b5eb4bab1599b14254401e675",
     "pre_install": [
         "@(",
         "    'if ($args.length -eq 1 -and ($args -eq \"selfupdate\" -or $args -eq \"self-update\")) { & scoop update composer }'",