Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires phpstan/phpstan ~1.10.16 -> satisfiable by phpstan/phpstan[1.10.16, ..., 1.10.67]. - Root composer.json requires sitegeist/inspectorgadget ^v3.0.0 -> satisfiable by sitegeist/inspectorgadget[v3.0.0]. - composer/composer[2.9.3, ..., 2.9.5] require composer/pcre ^2.3 || ^3.3 -> satisfiable by composer/pcre[2.3.0, 2.3.1, 2.3.2, 3.3.0, 3.3.1, 3.3.2]. - composer/pcre[2.3.0, ..., 2.3.2, 3.3.0, ..., 3.3.2] conflict with phpstan/phpstan <1.11.10. - neos/flow[9.0.0, ..., 9.1.0] require composer/composer ^2.7.7 -> satisfiable by composer/composer[2.9.3, 2.9.4, 2.9.5]. - neos/media-browser[9.0.3, ..., 9.0.4] require enshrined/svg-sanitize ^0.17.0 -> found enshrined/svg-sanitize[0.17.0] but these were not loaded, because they are affected by security advisories ("PKSA-4g5g-4rkv-myqs"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. - neos/neos[9.0.0, ..., 9.0.2] require neos/fusion-form ^1.0 || ^2.0 -> found neos/fusion-form[v1.0.0-beta1, ..., 1.0.x-dev, v2.0.0, ..., 2.3.x-dev] but it conflicts with your root composer.json require (~3.0 || dev-main). - neos/neos[9.0.5, ..., 9.0.10] require neos/flow ~9.0.0 -> satisfiable by neos/flow[9.0.0, ..., 9.0.5]. - neos/neos 9.0.3 requires neos/media-browser 9.0.3 -> satisfiable by neos/media-browser[9.0.3]. - neos/neos 9.0.4 requires neos/media-browser 9.0.4 -> satisfiable by neos/media-browser[9.0.4]. - neos/neos[9.1.0, ..., 9.1.3] require neos/flow ~9.1.0 -> satisfiable by neos/flow[9.1.0]. - sitegeist/inspectorgadget v3.0.0 requires neos/neos ^9.0 -> satisfiable by neos/neos[9.0.0, ..., 9.1.3].