I'm using an installation profile (open-outreach) and additional modules / themes. I don't want drush to update modules that are part of the profile, but would like to update everything else. Is there a command to do this?

  • not that I'm aware of ... just open DRUPAL_ROOT/profiles/open-outreach/modules/* and write down their names. Then do a drush up [all modules in sites/all/modules or in sites/your_domain/modules MINUS those in your install profile]. You could proably write a small Bash script to echo out the module names you should update.
    – tenken
    Commented Jan 2, 2013 at 23:20
  • Related and extremely helpful is:drupal.org/project/profile_status_check . This will tell you if a module is loaded from a profile and the latest version. Commented Mar 7, 2014 at 21:44

2 Answers 2


This would be a good feature request for the pm-updatecode command. I'd say that the best workaround for this missing functionality would be to tell Drush to lock the modules you do not want it to update. Do this one time:

drush pm-updatecode --lock=project1,project2,project3

Replace 'project1,project2,project3' with a comma-separated list of all of the projects in your installation profile. When you do this, Drush will write a lockfile into the mail directory of each project you mention, creating a persistent lock. Thereafter, you may run drush pm-updatecode without the --lock parameter, and Drush will remember that it should not update any of those modules.

If you wish, you may also lock the modules with http://drupal.org/project/update_advanced, and Drush should respect that as well. Works great in Drupal 6, but I have not tried Drupal 7 (only a dev release is available).


In the RC7 release of Open Outreach we introduced some related functionality cribbed from the Commerce Kickstart distro, see http://drupal.org/node/1852898. There isn't Drush support, but you could navigate to the update notifications page and note there the list of modules that show up.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.