--TEST-- See Github issue #4795 ( github.com/composer/composer/issues/4795 ). Composer\Installer::whitelistUpdateDependencies should not output a warning for dependencies that need to be updated that are also a root package, when that root package is also explicitly whitelisted. --COMPOSER-- { "repositories": [ { "type": "package", "package": [ { "name": "a", "version": "1.0.0" }, { "name": "a", "version": "1.1.0" }, { "name": "b", "version": "1.0.0", "require": { "a": "~1.0" } }, { "name": "b", "version": "1.1.0", "require": { "a": "~1.1" } } ] } ], "require": { "a": "~1.0", "b": "~1.0" } } --INSTALLED-- [ { "name": "a", "version": "1.0.0" }, { "name": "b", "version": "1.0.0", "require": { "a": "~1.0" } } ] --RUN-- update a b --with-dependencies --EXPECT-OUTPUT-- Loading composer repositories with package information Updating dependencies (including require-dev) Writing lock file Generating autoload files --EXPECT-- Updating a (1.0.0) to a (1.1.0) Updating b (1.0.0) to b (1.1.0)