Composer Security audit failure

[mahmoud-abdelmalek]

SDK:

• Version 8.0.0-p1

Describe the bug
Higher matching version 8.0.0-p2 of fooman/xero-php-oauth2 was found in the public repository packagist.org than 8.0.0-p1 in the private https://customer-repos.fooman.co.nz/. Public package might've been taken over by a malicious entity. Please investigate and update the package requirement to match the version from the private repository

To Reproduce
Steps to reproduce the behavior:

1. Go to any project with xeroapi/xero-php-oauth2 using a private repository
2. Delete composer.lock (or don't have one) or change xeroapi/xero-php-oauth2 version number in composer
3. Run composer install or composer update
4. See error

Expected behavior
fooman/xero-php-oauth2 should be uploaded to public and private repositories

[github-actions]

PETOSS-934

[github-actions]

Thanks for raising an issue, a ticket has been created to track your request