su chayes composer update drupal/core webflo/drupal-core-require-dev --with-dependencies *** composer outdated composer outdated "drupal/*" composer update --dry-run *** composer prohibits allows you to see exactly what is preventing a package from being updated. For example, on this codebase, I know I want to end up with drupal/core:8.5.0, so I can run: composer prohibits drupal/core:8.5.0