Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires biigle/module dev-master, found biigle/module[dev-dependabot/npm_and_yarn/npm_and_yarn-5490e23419, dev-main, v1.0.0, v1.1.0, v1.2.0, v1.3.0] but these do not match your constraint and are therefore not installable. Make sure you either fix the constraint or avoid updating this package to keep the one present in the lock file (biigle/module[dev-master]). Problem 2 - Root composer.json requires biigle/user-storage dev-master -> satisfiable by biigle/user-storage[dev-master]. - biigle/user-storage dev-master requires guzzlehttp/psr7 ^2.6 -> found guzzlehttp/psr7[2.6.0, ..., 2.7.x-dev] but the package is fixed to 2.4.3 (lock file version) by a partial update and that version does not match. Make sure you list it as an argument for the update command. Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.