I need to update my Drupal 8 site from 8.6.16 to 8.7.1, but when I run composer update drupal/core --with-dependencies it says "Nothing to install or update". I have been banging my head on the wall about this for 45 minutes, and haven't found anything on Google that fixes this.

Does anyone know why it says there is an update, but then says there is nothing to update or install?

  • 1
    What is the output of composer why-not drupal/core:8.7.1 ?
    – mpdonadio
    May 13, 2019 at 19:40
  • webflo/drupal-core-require-dev 8.6.16 requires drupal/core (8.6.16) drupal/core 8.7.1 requires egulias/email-validator (^2.0) drupal-composer/drupal-project - does not require egulias/email-validator (but 1.2.15 is installed)
    – Eluchel
    May 13, 2019 at 20:45

1 Answer 1


There seem to be some version dependency issue with that email-validator.

I solved it by updating the composer.json to the newer version before updating Drupal:

composer require drupal/core:~8.7.0 --no-update
composer require webflo/drupal-core-require-dev:~8.7.0 --no-update
composer update drupal/core webflo/drupal-core-require-dev --with-dependencies --dry-run
composer update drupal/core webflo/drupal-core-require-dev --with-dependencies 
cd web
[../vendor/bin/]drush updatedb
[../vendor/bin/]drush cr

YMMV, here is the Issues where you can get more help if this doesn't work (check the related Issues as well):

Cannot update to Drupal 8.7.0 from 8.6.15 -- egulias/email-validator version conflict

Don't forget to attach your composer.json and composer.lock there so the problem can be properly diagnosed.

  • Hadn't updated in awhile and ran into above issues... this resolved completely to upgrade from 8.6.16 to 8.7.2.. webflo indeed was problem
    – vrwired
    May 28, 2019 at 3:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.