pipeline failure - composer (previous minor)

Problem/Motivation

CI pipeline on module default branch is failing currently.

- https://git.drupalcode.org/project/migrate_plus/-/pipelines/700359 (latest pipeline from "Releases" section)

Error is:

$ composer install $COMPOSER_EXTRA
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.
  Problem 1
    - Root composer.json requires drupal/core-recommended 11.1.9 -> satisfiable by drupal/core-recommended[11.1.9].
    - drupal/core-recommended 11.1.9 requires symfony/http-foundation ~v7.2.0 -> found symfony/http-foundation[v7.2.0, ..., v7.2.9] but these were not loaded, because they are affected by security advisories ("PKSA-365x-2zjk-pt47"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
  Problem 2
    - Root composer.json requires drupal/core-dev 11.1.9 -> satisfiable by drupal/core-dev[11.1.9].
    - composer/composer 2.9.3 requires justinrainbow/json-schema ^6.5.1 -> satisfiable by justinrainbow/json-schema[6.5.1, ..., 6.6.4].
    - drupal/core-dev 11.1.9 requires composer/composer ^2.8.1 -> satisfiable by composer/composer[2.9.3].
    - drupal/core-dev 11.1.9 requires justinrainbow/json-schema ^5.2 -> satisfiable by justinrainbow/json-schema[5.2.0, ..., 5.3.1].
    - Conclusion: don't install justinrainbow/json-schema 5.3.1 (conflict analysis result)
    - You can only install one version of a package, so only one of these can be installed: justinrainbow/json-schema[5.2.0, ..., 5.3.1, 6.5.1, ..., 6.6.4].

Steps to reproduce

https://git.drupalcode.org/project/migrate_plus/-/pipelines/700359 or run CI locally.

Proposed resolution

Looks like 📌 Security blocks on Twig versions for Drupal 9 Active is the Gitlab Templates issue.

We could disable this job, or set it to allow failure, in the interim?

Remaining tasks

User interface changes

API changes

Data model changes