Allow Timber >1.24.1 and >=2.1 that contain a fix for the CVE

[rpkamp]

See https://github.com/timber/timber/releases

[Ocramius]

This package is auto-generated: you'll have to update the upstream advisory sources:

• https://github.com/github/advisory-database/blob/2c4d3f9ce26defe44404c9e7e1ff0e0249639085/advisories/github-reviewed/2024/04/GHSA-6363-v5m4-fvq3/GHSA-6363-v5m4-fvq3.json#L17-L40
• https://github.com/FriendsOfPHP/security-advisories/ (don't see it there)