In composer, specifying ~8.5 will actually match 8.x.x greater than 8.5, if the intention is to match 8.5.x and prevent matching 8.6 when an update is available, the correct way of doing it is setting ~8.5.0 to match 8.5.x greater than 8.5.0 wich is the current 8 version. Same applies to the webflo/drupal-core-require-dev
In composer, specifying ~8.5 will actually match 8.x.x greater than 8.5, if the intention is to match 8.5.x and prevent matching 8.6 when an update is available, the correct way of doing it is setting ~8.5.0 to match 8.5.x greater than 8.5.0 wich is the current 8 version. Same applies to the webflo/drupal-core-require-dev