Following
https://www.drupal.org/about/core/policies/core-dependency-policies-and-practices/managing-composer-updates-for-drupal-core#s-standard-non-dev-dependencies
This needs a separate branch for 10.3.x and 10.4.x, right?