diff --git a/bucket/composer.json b/bucket/composer.json
index 45fd11603a..bcbb2028f6 100644
--- a/bucket/composer.json
+++ b/bucket/composer.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.2.8",
+    "version": "2.2.9",
     "description": "Dependency Manager for PHP",
     "homepage": "https://getcomposer.org/",
     "license": "MIT",
@@ -10,8 +10,8 @@
             "php-nts"
         ]
     },
-    "url": "https://getcomposer.org/download/2.2.8/composer.phar",
-    "hash": "e1e1c580a237c739ecc1be57cf512e6b741faaa566439257d19ecd739ddfefaf",
+    "url": "https://getcomposer.org/download/2.2.9/composer.phar",
+    "hash": "48f9fdc9ad93904fee96550b45ae03a51f69718502ee855da894b4ad71d2dfe0",
     "pre_install": [
         "@(",
         "    'if ($args.length -eq 1 -and ($args -eq \"selfupdate\" -or $args -eq \"self-update\")) { & scoop update composer }'",