Kevin + Drupal + Beard<p><span class="h-card"><a href="https://mastodon.social/@kraftner" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>kraftner</span></a></span> reading about <a href="https://fosstodon.org/tags/DDD23" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DDD23</span></a> from someone with a <a href="https://fosstodon.org/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>wordpress</span></a> vs. a <a href="https://fosstodon.org/tags/drupal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>drupal</span></a> pov is interesting. I think what you are missing about the Composer updates is the "off the island" approach. It isn't just updating Drupal core, the contrib modules and themes (the PHP the Drupal project controls), but all the PHP packages the project uses. This is very different than WordPress Automatic Updates.</p>