How to Update Packages Using Composer in PHP

To update packages using composer in PHP, run composer update in your project directory. This command updates all packages to the latest versions allowed by your composer.json file.

Syntax

The basic command to update packages is composer update [package-name]. If you omit [package-name], Composer updates all packages listed in composer.json.

• composer update: Updates all packages.
• composer update vendor/package: Updates only the specified package.
• --with-dependencies: Also updates dependencies of the specified package.

bash

composer update [package-name] [--with-dependencies]

Example

This example shows how to update all packages in your PHP project using Composer.

bash

cd /path/to/your/project
composer update

Output

Loading composer repositories with package information
Updating dependencies
Package operations: 0 installs, 2 updates, 0 removals
  - Updating vendor/package1 (1.0.0 => 1.1.0): Downloading (100%)
  - Updating vendor/package2 (2.3.4 => 2.4.0): Downloading (100%)
Writing lock file
Generating autoload files

Common Pitfalls

Some common mistakes when updating packages with Composer include:

• Running composer update without checking composer.json constraints, which may upgrade packages to incompatible versions.
• Not committing composer.lock file, causing inconsistent dependencies across environments.
• Forgetting to run composer install on other environments after updating.

bash

Wrong way:
composer update

Right way:
# Check composer.json constraints first
composer update vendor/package
# Commit composer.lock after update
# Run composer install on other environments

Quick Reference

Command	Description
composer update	Updates all packages to latest allowed versions
composer update vendor/package	Updates only the specified package
composer update vendor/package --with-dependencies	Updates package and its dependencies
composer install	Installs packages from composer.lock without updating

Key Takeaways

Use composer update to upgrade all packages according to composer.json constraints.

Specify a package name to update only that package and avoid unexpected upgrades.

Always commit your composer.lock file after updating to keep dependencies consistent.

Run composer install on other environments to match updated dependencies.

Check your composer.json version constraints before updating to prevent breaking changes.