I mean if we don't crash a release-cycle we could just do the composer install at the beginning directly after pulling.. leave that in master for 2 runs and then remove it again