Dependencies not whitelisted for update if parent package is up-to-date?

[teohhanhui]

My composer.json:

{
    "license": "proprietary",
    "require": {
        "php": "^7.1.3",
        "ext-apcu": "*",
        "ext-bcmath": "*",
        "ext-ds": "*",
        "api-platform/api-pack": "^2.1@dev",
        "api-platform/core": "^2.1@dev",
        "doctrine/common": "^2.7.2",
        "doctrine/dbal": "^2.5.10",
        "doctrine/doctrine-migrations-bundle": "^1.2.1",
        "doctrine/orm": "^2.5.6",
        "egulias/email-validator": "^2.1.2",
        "facebook/graph-sdk": "^5.5",
        "friendsofsymfony/http-cache-bundle": "^1.3.10",
        "gedmo/doctrine-extensions": "^2.4.25",
        "guzzlehttp/guzzle": "^6.2",
        "hashids/hashids": "^2.0.3",
        "intaro/custom-index-bundle": "dev-master",
        "jsor/doctrine-postgis": "^1.4",
        "lafourchette/switch-user-stateless-bundle": "dev-master",
        "lcobucci/jwt": "^3.2",
        "league/flysystem-aws-s3-v3": "^1.0.15",
        "league/tactician-bundle": "^0.4.1",
        "league/uri": "^5.0",
        "leesiongchan/omnipay-molpay": "3.0.x-dev",
        "lexik/jwt-authentication-bundle": "^2.4",
        "mariano/disque-php": "^2.0.3",
        "misd/phone-number-bundle": "^1.2",
        "moneyphp/money": "^3.0.4",
        "myclabs/php-enum": "^1.5.1",
        "nelmio/cors-bundle": "1.4.x-dev",
        "nikic/iter": "^1.5",
        "ocramius/proxy-manager": "^2.1.1",
        "omnipay/omnipay": "3.0.x-dev#2245aa7f850ae9e06be9283ace37d6c9ef070d24",
        "oneup/flysystem-bundle": "^1.11",
        "opsway/doctrine-dbal-postgresql": "^0.7.3",
        "oro/doctrine-extensions": "^1.1",
        "phayes/geophp": "dev-master",
        "predis/predis": "^1.1",
        "ramsey/uuid": "^3.6",
        "sensio/framework-extra-bundle": "^3.0",
        "sensiolabs/security-checker": "^4.0",
        "symfony/console": "^3.3",
        "symfony/flex": "^1.0",
        "symfony/framework-bundle": "^3.3",
        "symfony/monolog-bundle": "^3.1",
        "symfony/orm-pack": "^1.0",
        "symfony/proxy-manager-bridge": "^3.3",
        "symfony/psr-http-message-bridge": "^1.0",
        "symfony/security-bundle": "^3.3",
        "symfony/yaml": "^3.3",
        "vich/uploader-bundle": "^1.4",
        "zendframework/zend-diactoros": "^1.4"
    },
    "require-dev": {
        "phpstan/phpstan": "^0.7",
        "phpstan/phpstan-doctrine": "^0.7",
        "phpstan/phpstan-guzzle": "^0.7",
        "phpunit/phpunit": "^6.0.5",
        "symfony/dotenv": "^3.3",
        "symfony/phpunit-bridge": "^3.3",
        "symfony/profiler-pack": "^1.0",
        "theofidry/psysh-bundle": "^3.1"
    },
    "conflict": {
        "symfony/symfony": "*",
        "symfony/twig-bundle": "<3.3",
        "symfony/debug": "<3.3"
    },
    "autoload": {
        "psr-4": {
            "App\\": "src/"
        },
        "exclude-from-classmap": [
            "/src/Migration/"
        ]
    },
    "autoload-dev": {
        "psr-4": {
            "App\\Tests\\": "tests/"
        }
    },
    "repositories": [
        {
            "type": "vcs",
            "url": "https://github.com/funiq/geoPHP"
        },
        {
            "type": "vcs",
            "url": "https://github.com/teohhanhui/api-platform-core"
        },
        {
            "type": "vcs",
            "url": "https://github.com/teohhanhui/NelmioCorsBundle"
        },
        {
            "type": "vcs",
            "url": "https://github.com/tripviss/omnipay"
        }
    ],
    "config": {
        "preferred-install": {
            "*": "dist"
        },
        "sort-packages": true
    },
    "scripts": {
        "auto-scripts": {
            "make cache-warmup": "script",
            "assets:install %WEB_DIR%": "symfony-cmd",
            "vendor/bin/security-checker security:check": "php-script"
        },
        "post-install-cmd": [
            "@auto-scripts"
        ],
        "post-update-cmd": [
            "@auto-scripts"
        ]
    },
    "extra": {
        "symfony": {
            "id": "01BHCAH3W9WBQQ4N8MVB7665BK",
            "allow-contrib": "true"
        }
    }
}

Output of composer diagnose:

Checking composer.json: WARNING
The package "omnipay/omnipay" is pointing to a commit-ref, this is bad practice and can cause unforeseen issues.
require.intaro/custom-index-bundle : unbound version constraints (dev-master) should be avoided
require.lafourchette/switch-user-stateless-bundle : unbound version constraints (dev-master) should be avoided
require.leesiongchan/omnipay-molpay : exact version constraints (3.0.x-dev) should be avoided if the package follows semantic versioning
require.nelmio/cors-bundle : exact version constraints (1.4.x-dev) should be avoided if the package follows semantic versioning
require.omnipay/omnipay : exact version constraints (3.0.x-dev#2245aa7f850ae9e06be9283ace37d6c9ef070d24) should be avoided if the package follows semantic versioning
require.phayes/geophp : unbound version constraints (dev-master) should be avoided
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity to packagist: OK
Checking https connectivity to packagist: OK
Checking github.com oauth access: OK
Checking disk free space: OK
Checking pubkeys: 
Tags Public Key Fingerprint: 57815BA2 7E54DC31 7ECC7CC5 573090D0  87719BA6 8F3BB723 4E5D42D0 84A14642
Dev Public Key Fingerprint: 4AC45767 E5EC2265 2F0C1167 CBBB8A2B  0C708369 153E328C AD90147D AFE50952
OK
Checking composer version: OK

When I run this command:

composer update api-platform/api-pack --with-dependencies --prefer-dist -vvv

I get the following output:

Reading ./composer.json
Loading config file /root/.composer/config.json
Loading config file /root/.composer/auth.json
Loading config file ./composer.json
Checked CA file /etc/ssl/certs/ca-certificates.crt: valid
Executing command (/srv/tripviss-api): git branch --no-color --no-abbrev -v
Reading /root/.composer/composer.json
Loading config file /root/.composer/config.json
Loading config file /root/.composer/auth.json
Loading config file /root/.composer/composer.json
Loading config file /root/.composer/auth.json
Reading /root/.composer/auth.json
Reading /srv/tripviss-api/vendor/composer/installed.json
Reading /root/.composer/vendor/composer/installed.json
Loading plugin PackageVersions\Installer
Loading plugin Symfony\Flex\Flex
Loading plugin Hirak\Prestissimo\Plugin
Downloading https://packagist.org/packages.json
Writing /root/.composer/cache/repo/https---packagist.org/packages.json into cache
    1/10:   http://packagist.org/p/provider-2013$42bde942a2f09a4c1ef4355c2301f2fdfd5bd8836a6eecd838f016cc9603b16b.json
    2/10:   http://packagist.org/p/provider-archived$bdcf8d261b9f990475d3b9b25e767a1fd75cb0c0e14b8bba7ff786fd7a79d92a.json
    3/10:   http://packagist.org/p/provider-2014$b3998ac22974d61da8558875767e72b620b5be13d2d6da5405badc66b8a65b54.json
    4/10:   http://packagist.org/p/provider-2015$efd64280ce900a92f6be32a535b3508b51bb0632334f8f922814bd290b4fa5fa.json
    6/10:   http://packagist.org/p/provider-latest$ff6a7a066177ac07485ceb889bf220440c5f662d96e684144ef6fd407e2bbd15.json
    6/10:   http://packagist.org/p/provider-2016-10$503996472303cf19e11533bfd0d0a9c2411470c2daa1e28ff9ceb247785796e4.json
    7/10:   http://packagist.org/p/provider-2017-01$bfa6ee85e3f4deb6625a54fdc18aa5002143856ef67240c9bfcc054f4e6288b2.json
    9/10:   http://packagist.org/p/provider-2016-07$546cb601b8fd553a39127ef7998ebd83e1dcfabe9473a623d95b971d33f2c65e.json
    9/10:   http://packagist.org/p/provider-2016$49d96934035d3545cd30273dc7117fd3a94a2e507cc261ee49357baf7949f3cf.json
    10/10:  http://packagist.org/p/provider-2017-04$b69cd7a886da4a113452cb1dbc757a2f56f550b278a0370442968c044e225e02.json
    Finished: success: 10, skipped: 0, failure: 0, total: 10
Running 1.4.2 (2017-05-17 08:17:52) with PHP 7.1.5 on Linux / 4.10.0-21-generic
Reading ./composer.lock
Loading composer repositories with package information
Downloading https://api.github.com/repos/funiq/geoPHP
Downloading https://api.github.com/repos/funiq/geoPHP/contents/composer.json?ref=master
Downloading https://api.github.com/repos/funiq/geoPHP/commits/master
Downloading https://api.github.com/repos/funiq/geoPHP/tags?per_page=100
Downloading https://api.github.com/repos/funiq/geoPHP/git/refs/heads?per_page=100
Reading composer.json of phayes/geophp (master)
Downloading https://api.github.com/repos/funiq/geoPHP/contents/composer.json?ref=36bd6f264210408980eafafdb238475bdadf602f
Downloading https://api.github.com/repos/funiq/geoPHP/commits/36bd6f264210408980eafafdb238475bdadf602f
Writing /root/.composer/cache/repo/github.com/funiq/geoPHP/36bd6f264210408980eafafdb238475bdadf602f into cache
Importing branch master (dev-master)
Downloading https://api.github.com/repos/teohhanhui/api-platform-core
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/contents/composer.json?ref=master
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/commits/master
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/tags?per_page=100
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/git/refs/heads?per_page=100
Reading composer.json of api-platform/core (feature/jsonld-blank-nodes)
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/contents/composer.json?ref=56b76f460d17b6186385db39b1e2e6eec3003cbd
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/commits/56b76f460d17b6186385db39b1e2e6eec3003cbd
Writing /root/.composer/cache/repo/github.com/teohhanhui/api-platform-core/56b76f460d17b6186385db39b1e2e6eec3003cbd into cache
Importing branch feature/jsonld-blank-nodes (dev-feature/jsonld-blank-nodes)
Reading composer.json of api-platform/core (master)
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/contents/composer.json?ref=636ea70cedc9c5977ded467d3acf6a985daa5944
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/commits/636ea70cedc9c5977ded467d3acf6a985daa5944
Writing /root/.composer/cache/repo/github.com/teohhanhui/api-platform-core/636ea70cedc9c5977ded467d3acf6a985daa5944 into cache
Importing branch master (dev-master)
Reading composer.json of api-platform/core (rfc-7807-compliance)
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/contents/composer.json?ref=9941edd6519c825c176bc6a984a1fe62a0d4a212
Downloading https://api.github.com/repos/teohhanhui/api-platform-core/commits/9941edd6519c825c176bc6a984a1fe62a0d4a212
Writing /root/.composer/cache/repo/github.com/teohhanhui/api-platform-core/9941edd6519c825c176bc6a984a1fe62a0d4a212 into cache
Importing branch rfc-7807-compliance (dev-rfc-7807-compliance)
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/contents/composer.json?ref=master
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/commits/master
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/tags?per_page=100
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/git/refs/heads?per_page=100
Reading composer.json of nelmio/cors-bundle (master)
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/contents/composer.json?ref=ab4091480e932b6b22fd9f0bb0511687c4b5b73e
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/commits/ab4091480e932b6b22fd9f0bb0511687c4b5b73e
Writing /root/.composer/cache/repo/github.com/teohhanhui/NelmioCorsBundle/ab4091480e932b6b22fd9f0bb0511687c4b5b73e into cache
Importing branch master (dev-master)
Reading composer.json of nelmio/cors-bundle (vary-origin)
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/contents/composer.json?ref=de94ac69c88a43324dcda57aef2df036632c3101
Downloading https://api.github.com/repos/teohhanhui/NelmioCorsBundle/commits/de94ac69c88a43324dcda57aef2df036632c3101
Writing /root/.composer/cache/repo/github.com/teohhanhui/NelmioCorsBundle/de94ac69c88a43324dcda57aef2df036632c3101 into cache
Importing branch vary-origin (dev-vary-origin)
Downloading https://api.github.com/repos/tripviss/omnipay
Downloading https://api.github.com/repos/tripviss/omnipay/contents/composer.json?ref=master
Downloading https://api.github.com/repos/tripviss/omnipay/commits/master
Downloading https://api.github.com/repos/tripviss/omnipay/tags?per_page=100
Downloading https://api.github.com/repos/tripviss/omnipay/git/refs/heads?per_page=100
Reading composer.json of omnipay/omnipay (master)
Downloading https://api.github.com/repos/tripviss/omnipay/contents/composer.json?ref=aa0178549249b68cdf83d9d6822b505a361a196a
Downloading https://api.github.com/repos/tripviss/omnipay/commits/aa0178549249b68cdf83d9d6822b505a361a196a
Writing /root/.composer/cache/repo/github.com/tripviss/omnipay/aa0178549249b68cdf83d9d6822b505a361a196a into cache
Importing branch master (dev-master)
Reading composer.json of omnipay/omnipay (3.0)
Downloading https://api.github.com/repos/tripviss/omnipay/contents/composer.json?ref=2245aa7f850ae9e06be9283ace37d6c9ef070d24
Downloading https://api.github.com/repos/tripviss/omnipay/commits/2245aa7f850ae9e06be9283ace37d6c9ef070d24
Writing /root/.composer/cache/repo/github.com/tripviss/omnipay/2245aa7f850ae9e06be9283ace37d6c9ef070d24 into cache
Importing branch 3.0 (3.0.x-dev)
Writing /root/.composer/cache/repo/https---packagist.org/packages.json into cache
Updating dependencies (including require-dev)
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2013.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2014.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2015.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2016.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2016-07.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2016-10.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2017-01.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-2017-04.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-archived.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/p-provider-latest.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-api-platform$api-pack.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-ocramius$package-versions.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$flex.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$polyfill-mbstring.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$translation.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$validator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-twig$twig.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$twig-bridge.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$http-foundation.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$event-dispatcher.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-psr$log.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$debug.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$http-kernel.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$filesystem.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$config.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$twig-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$polyfill-php54.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$polyfill-php55.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-ircmaxell$password-compat.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-paragonie$random-compat.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$polyfill-php70.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$inflector.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$property-access.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$polyfill-util.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$polyfill-php56.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-psr$container.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$dependency-injection.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-psr$simple-cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-psr$cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$expression-language.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$asset.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-webmozart$assert.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpdocumentor$reflection-common.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpdocumentor$type-resolver.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpdocumentor$reflection-docblock.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$console.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$instantiator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$lexer.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$inflector.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$collections.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$annotations.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$common.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$dbal.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$orm.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$stopwatch.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$routing.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$finder.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$class-loader.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$framework-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$doctrine-bridge.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-jdorn$sql-formatter.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$doctrine-cache-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$doctrine-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security-acl.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security-core.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-willdurand$negotiation.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$serializer.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$property-info.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-api-platform$core.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$yaml.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-zendframework$zend-eventmanager.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-zendframework$zend-code.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-zendframework$zend-stdlib.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-athletic$athletic.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-zendframework$zend-hydrator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-ocramius$proxy-manager.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$migrations.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-doctrine$doctrine-migrations-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-egulias$email-validator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-facebook$graph-sdk.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$options-resolver.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$guzzle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-friendsofsymfony$http-cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-friendsofsymfony$http-cache-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-behat$transliterator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-gedmo$doctrine-extensions.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-giggsey$locale.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzlehttp$promises.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-psr$http-message.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzlehttp$psr7.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-hashids$hashids.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-intaro$custom-index-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-jeremykendall$php-domain-parser.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-jsor$doctrine-postgis.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security-http.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-lafourchette$switch-user-stateless-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-lcobucci$jwt.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$flysystem.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-mtdowling$jmespath.php.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzlehttp$guzzle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-aws$aws-sdk-php.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$flysystem-aws-s3-v3.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$tactician.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$tactician-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$uri-parser.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$uri-interfaces.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$uri-schemes.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$uri-components.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$uri-manipulations.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$uri.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-zendframework$zend-diactoros.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-alcohol$iso4217.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-omnipay$omnipay.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-leesiongchan$omnipay-molpay.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-php-http$guzzle6-adapter.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-omnipay$common.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-php-http$httplug.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-php-http$promise.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-namshi$jose.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-lexik$jwt-authentication-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-mariano$disque-php.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-giggsey$libphonenumber-for-php.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-misd$phone-number-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-moneyphp$money.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-myclabs$php-enum.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nelmio$cors-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nikic$iter.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-oneup$flysystem-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-opsway$doctrine-dbal-postgresql.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-oro$doctrine-extensions.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phayes$geophp.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-predis$predis.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-ramsey$uuid.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sensio$framework-extra-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-composer$ca-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sensiolabs$security-checker.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-monolog$monolog.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$monolog-bridge.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$monolog-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$orm-pack.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$proxy-manager-bridge.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$psr-http-message-bridge.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$templating.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-jms$metadata.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-vich$uploader-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-dnoegel$php-xdg-base-dir.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-jakub-onderka$php-console-color.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-jakub-onderka$php-console-highlighter.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$utils.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$php-generator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$neon.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$di.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$bootstrap.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$finder.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$caching.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$robot-loader.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nikic$php-parser.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpstan$phpstan.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpstan$phpstan-doctrine.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpstan$phpstan-guzzle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$php-token-stream.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$version.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$resource-operations.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$recursion-context.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$object-reflector.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$object-enumerator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$global-state.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$exporter.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$environment.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$diff.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$comparator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$php-text-template.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$phpunit-mock-objects.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$php-timer.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$php-file-iterator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-theseer$tokenizer.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-sebastian$code-unit-reverse-lookup.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$php-code-coverage.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpspec$prophecy.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-dflydev$markdown.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phar-io$version.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phar-io$manifest.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-myclabs$deep-copy.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$phpunit.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$dotenv.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$phpunit-bridge.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$var-dumper.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$web-profiler-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$profiler-pack.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-psy$psysh.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-theofidry$psysh-bundle.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security-csrf.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$security-guard.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$form.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$workflow.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$batch.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$common.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$http.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$inflection.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$iterator.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$log.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$parser.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-async.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-backoff.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-cache.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-cookie.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-curlauth.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-error-response.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-history.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-log.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-md5.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-mock.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$plugin-oauth.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$service.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-guzzle$stream.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-league$flysystem-sftp.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-practo$libphonenumber-for-php.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-giggsey$libphonenumber-geocoder.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-rhumsaa$uuid.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-nette$nette.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-phpunit$dbunit.json into cache
Writing /root/.composer/cache/repo/https---packagist.org/provider-symfony$symfony.json into cache
Resolving dependencies through SAT
Dependency resolution completed in 0.346 seconds
Analyzed 11782 packages to resolve dependencies
Analyzed 433982 rules to resolve dependencies
Nothing to install or update
Resolving dependencies through SAT
Dependency resolution completed in 0.001 seconds
Package guzzle/guzzle is abandoned, you should avoid using it. Use guzzlehttp/guzzle instead.
Reading /srv/tripviss-api/vendor/composer/installed.json
Generating autoload files
ocramius/package-versions:  Generating version class...
ocramius/package-versions: ...done generating version class
> post-update-cmd: @auto-scripts
Executing script make cache-warmup
Executed script make cache-warmup  [OK]
Executing script assets:install %WEB_DIR%
Executed script assets:install %WEB_DIR%  [OK]
Executing script vendor/bin/security-checker security:check
Executed script vendor/bin/security-checker security:check  [OK]

And I expected this to happen:

symfony/asset, symfony/expression-language, symfony/security-bundle, symfony/twig-bundle, symfony/validator should be updated from v3.3.0 to v3.3.2.

---

More information: https://gist.github.com/teohhanhui/0832092f9be0c75dbea70e79b3b5a092

composer.json of api-platform/api-pack at the time of the update: https://github.com/api-platform/api-pack/blob/895c9ddbbb7d884425f2bda37acbb3fe36d25af1/composer.json

[teohhanhui]

I've noticed that there are some other packages not updated too... Doesn't seem to be related to metapackage.

[alcohol]

To answer your question, yes, they are not updated because the parent package was not updated. You did not ask to update them. The --with-dependencies flag is only there to facilitate updating the requested package in cases where it can only be updated if you update the dependencies too.

If you want to update the symfony packages (and only the symfony packages), I would suggest running composer update 'symfony/*' --with-dependencies (quotes are there to prevent bash expansion attempt).

Or run composer outdated to see which packages could be updated.