# Verify pending updates
composer outdated drupal/*
# Update drupal core and dependencies
composer update drupal/core --with-dependencies
# Drupal site using drupal-composer/drupal-project
composer update drupal/core webflo/drupal-core-require-dev --with-dependencies
# Once I was forced to remove composer.lock and vendor/ then redo composer update with dependencies
rm -Rf composer.lock vendor/