Security Updates for Drupal with Composer

Use when:

• Running a security audit on a Drupal project
• Fixing packages flagged by composer audit
• Applying a specific security advisory
• Verifying no known vulnerabilities remain

Before You Start — Create a Branch

This step is mandatory. Do not run any composer commands until a new branch is created and confirmed. Never update packages directly on main or master.

Check the current branch first: