Yes, it's a Composer issue (which is a PHP dependencies manager) with the new format of GITHUB_TOKEN.
It's not an issue in GHA itself, this time. But if you are a composer user in GH, you should definitely be warned (and worried).
You're using PHP... you aren't worried about anything... ;-)
/kidding
You're using PHP... you aren't worried about anything... ;-)
/kidding