Do we actually need that version here? Or just a dependency needs it? I would rather find the reason why this doesn't work as intended instead of this update.

I know you would Mark. This is me being pragmatic to solve the build error. The difference between message-factory:1.0.0 and 1.0.2 is that the latter has Puli bindings (if I remember correctly)

So no, we do not actually need that version here.

not sure if its worth the effort to figure out why it does not work. there is no harm in upping the requriement to the factory...

I found the problem: composer/composer#5355