diff --git a/bucket/composer.json b/bucket/composer.json
index 9c5768028e..ee1c57a81f 100644
--- a/bucket/composer.json
+++ b/bucket/composer.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.3.5",
+    "version": "2.3.6",
     "description": "Dependency Manager for PHP",
     "homepage": "https://getcomposer.org/",
     "license": "MIT",
@@ -10,8 +10,8 @@
             "php-nts"
         ]
     },
-    "url": "https://getcomposer.org/download/2.3.5/composer.phar",
-    "hash": "3b3b5a899c06a46aec280727bdf50aad14334f6bc40436ea76b07b650870d8f4",
+    "url": "https://getcomposer.org/download/2.3.6/composer.phar",
+    "hash": "188e079d509156130d30204c9c8b3f00134dbbc6afadc2f37ed05d02646a47dc",
     "pre_install": [
         "@(",
         "    'if ($args.length -eq 1 -and ($args -eq \"selfupdate\" -or $args -eq \"self-update\")) { & scoop update composer }'",