This is a high level update procs for update a Drupal 8 site from Drupal v. 8.4.x to 8.5.x to pick up the critical security updates.
This does not include debugging tips if things go sideways resultant of the updates.
Create new clone or update dev site to current and backup. Be ready to restore is things go sideways. Put site in maintenace mode.
Run:
$ composer update drupal/core webflo/drupal-core-require-dev symfony/* --with-dependencies
$ drush updatedb
% drupal cr all
Test. If all goes well, take out of maintnenance mode and either commit updates or repeat steps on production flow servers. Would be a good idea to run config exports and check for changes.
References:
- drupal-composer/drupal-project#369
- https://www.jeffgeerling.com/blog/2018/updating-drupalcore-composer-drupal-core-doesnt-update
This thread has a goldmine:
- https://www.drupal.org/project/drupal/issues/2943546
- https://www.drupal.org/project/drupal/issues/2943546#comment-12539080
- https://www.drupal.org/project/drupal/issues/2943546#comment-12545848
- https://www.drupal.org/project/drupal/issues/2943546#comment-12546233 ** and continue on past comment #52 for more helpful discussion.