--TEST-- Update with a package allow list only updates those packages if they are not present in composer.json --COMPOSER-- { "repositories": [ { "type": "package", "package": [ { "name": "allowed/pkg", "version": "1.1.0", "require": { "dependency/pkg": "1.1.0", "fixed/dependency": "1.*" } }, { "name": "allowed/pkg", "version": "1.0.0", "require": { "dependency/pkg": "1.0.0", "fixed/dependency": "1.*" } }, { "name": "dependency/pkg", "version": "1.1.0" }, { "name": "dependency/pkg", "version": "1.0.0" }, { "name": "fixed/dependency", "version": "1.1.0", "require": { "fixed/sub-dependency": "1.*" } }, { "name": "fixed/dependency", "version": "1.0.0", "require": { "fixed/sub-dependency": "1.*" } }, { "name": "fixed/sub-dependency", "version": "1.1.0" }, { "name": "fixed/sub-dependency", "version": "1.0.0" } ] } ], "require": { "allowed/pkg": "1.*", "fixed/dependency": "1.*" } } --INSTALLED-- [ { "name": "allowed/pkg", "version": "1.0.0", "require": { "dependency/pkg": "1.0.0", "fixed/dependency": "1.*" } }, { "name": "dependency/pkg", "version": "1.0.0" }, { "name": "fixed/dependency", "version": "1.0.0", "require": { "fixed/sub-dependency": "1.*" } }, { "name": "fixed/sub-dependency", "version": "1.0.0" } ] --LOCK-- { "packages": [ { "name": "allowed/pkg", "version": "1.0.0", "require": { "dependency/pkg": "1.0.0", "fixed/dependency": "1.*" } }, { "name": "dependency/pkg", "version": "1.0.0" }, { "name": "fixed/dependency", "version": "1.0.0", "require": { "fixed/sub-dependency": "1.*" } }, { "name": "fixed/sub-dependency", "version": "1.0.0" } ], "packages-dev": [], "aliases": [], "minimum-stability": "dev", "stability-flags": [], "prefer-stable": false, "prefer-lowest": false, "platform": [], "platform-dev": [] } --RUN-- update allowed/pkg dependency/pkg --EXPECT-- Upgrading dependency/pkg (1.0.0 => 1.1.0) Upgrading allowed/pkg (1.0.0 => 1.1.0)