diff --git a/README.md b/README.md
index 4897326ee65ab745dc8f341a49b735b206369003..1ae635f554dfe874d73c62af740eb3a38f45ace5 100644
--- a/README.md
+++ b/README.md
@@ -101,3 +101,18 @@ CI should be a normal user that creates a DrupalSite with this version/release a
  One, our image implementation is inspired by https://github.com/bkuhl/fpm-nginx (That does not differ from Nginx supported [image](https://github.com/nginxinc/docker-nginx/blob/master/stable/alpine/Dockerfile)).
  Two, Nginx might break CI if stable upstream changes, to fix CI please update the local DockerFile according to upstream.
 
+## Upgrade version constraints of included Composer packages
+
+Occasionally we would like to try upgrading all the bundled packages to the latest version that doesn't break the CERN Drupal Distribution.
+This will become easier with more thorough CI testing.
+
+Workflow:
+1. Update all version constraints in composer.json to the newest available.
+1. Let CI tests confirm that the generated websites aren't breaking. Test thoroughly in coordination with the Web team all the bundled functionality.
+1. As we iterate on the changes, it is likely that some of the upgrades may have to be rolled back.
+
+To update all version constraints to the newest:
+
+```bash
+jq -r '.require | keys[]' composer.json | xargs composer require
+```
diff --git a/composer.json b/composer.json
index 77f2b2f5f040fe8198a560faadf1e15e29ea9383..16ab8369cc84ea97164f24cc1b2a3435b2aa0286 100644
--- a/composer.json
+++ b/composer.json
@@ -146,9 +146,9 @@
     "drupal/context": "~4.1.0",
     "drupal/contribute": "~1.x-dev@dev",
     "drupal/cookieconsent": "~1.6.0",
-    "drupal/core-composer-scaffold": "9.3.9",
-    "drupal/core-project-message": "9.3.9",
-    "drupal/core-recommended": "9.3.9",
+    "drupal/core-composer-scaffold": "9.3.12",
+    "drupal/core-project-message": "9.3.12",
+    "drupal/core-recommended": "9.3.12",
     "drupal/ctools": "~3.7.0",
     "drupal/devel": "~4.1.1",
     "drupal/ds": "~3.13.0",
diff --git a/images/softwareVersions b/images/softwareVersions
index 2d6f1dfb23931371c4bde19b91d604733fac27fd..a33cfdae774907e5fabb1263c4abea6d1a20947d 100644
--- a/images/softwareVersions
+++ b/images/softwareVersions
@@ -7,6 +7,6 @@ nginxNJS: '0.7.2'
 
 # This value is used to build the composer-builder ONLY.
 # It will NOT affect the sitebuilder directly.
-composer: '2.2.7'
+composer: '2.3.5'
 # This is instead the version of the composer builder that the sitebuilder will use.
-composerBuilderTag: 'v9.3-1-RELEASE-2022.03.10T15-05-23Z'
+composerBuilderTag: 'dev-v9.3-2-ab6fa5ce'