diff --git a/CHANGELOG.md b/CHANGELOG.md
index ed5765d6..41cc6059 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,7 @@ Latest
 ------
 
 ## Changes
+* [#319](https://github.com/cleverage/process-bundle/issues/319) Composer: require PHP `^8.2` instead of `>=8.2` (PHP 9 is no longer accepted before being tested), remove the authorization of the `symfony/flex` plugin, which is not required (the CI installs it globally).
 * [#318](https://github.com/cleverage/process-bundle/issues/318) `CommandRunnerTask`, `ProcessLauncherTask` and `SubprocessInstance` receive the project directory, the path of the console and the environment (`%kernel.project_dir%`, `%kernel.environment%`) instead of the kernel: passing a `KernelInterface` is deprecated, the arguments will only accept strings in v6.0. `SubprocessInstance` writes the JSON buffer of `ProcessLauncherTask` (`json_buffering`) in the system temporary directory instead of `var/` of the project (which may be read-only), no longer creates the unused `<log dir>/process` directory, and omits `--env` when no environment is given (default environment of the console). Update documentation, add tests.
 * [#317](https://github.com/cleverage/process-bundle/issues/317) The bundle throws exceptions implementing `ProcessExceptionInterface` instead of raw SPL exceptions (124 `throw`): new `Exception\UnexpectedValueException`, `RuntimeException`, `InvalidArgumentException` and `LogicException`, extending the SPL exceptions thrown before (same messages, the existing `catch` keep working). All the errors of the bundle can be caught with `ProcessExceptionInterface`, except the exceptions of the Symfony components. Update documentation, add tests.
 * [#311](https://github.com/cleverage/process-bundle/issues/311) Deprecate the `cleverage_process.event_listener.data_queue` service and `DataQueueEventListener` (it keeps a copy of the `ProcessState` of every `cleverage_process.data_queue` event in memory, without limit): injecting or fetching the service triggers a deprecation, they will be removed in v6.0. Write your own listener of the event dispatched by the `event_dispatcher` task. Update documentation, add tests.
diff --git a/composer.json b/composer.json
index 34f46723..ed9b75a4 100644
--- a/composer.json
+++ b/composer.json
@@ -53,7 +53,7 @@
     }
   },
   "require": {
-    "php": ">=8.2",
+    "php": "^8.2",
     "ext-dom": "*",
     "ext-json": "*",
     "ext-libxml": "*",
@@ -119,8 +119,7 @@
   },
   "config": {
     "allow-plugins": {
-      "phpstan/extension-installer": true,
-      "symfony/flex": true
+      "phpstan/extension-installer": true
     },
     "sort-packages": true
   }