How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

Steps to reproduce

1. ci: Update workflows external#908
2. composer i
3. composer cs:fix -> No changes
4. composer remove nextcloud/ocp --dev (like the CI does)
5. composer cs:fix -> Changes as seen in CI

Expected behaviour

When removing nextcloud/ocp, only the main composer.lock should be touched to remove the dependency and no updates should be performed in any composer.lock file.

Actual behaviour

The composer.lock files in vendor-bin are updated and pull in new versions.