Same issue here, for the WP Migrate Pro plugin. It happens on two trellis instances.
Locally, composer updates correctly the plugin to the latest version.
On the remote server, it does not, although the composer.lock file does mention the correct (latest) versions.
I’ve tried ssh-ing on the remote server and composer clear-cache
then committing the composer.json + composer.lock files (after checking it had the correct versions), then re-deploying.
To be honest, I only have this issue with that specific plugin so I’m not exactly sure this is related to trellis.
For the record, here is the package.json file (trimmed):
{
"type": "package",
"package": {
"name": "deliciousbrains/wp-migrate-db-pro",
"type": "wordpress-plugin",
"version": "1.8.1",
"dist": {
"type": "zip",
"url": "https://deliciousbrains.com/dl/wp-migrate-db-pro-latest.zip?licence_key=my-license&site_url=my-site.tld"
},
"require": {
"composer/installers": "~1.2.0"
}
}
}, {
"type": "package",
"package": {
"name": "deliciousbrains/wp-migrate-db-pro-media-files",
"type": "wordpress-plugin",
"version": "1.4.9",
"dist": {
"type": "zip",
"url": "https://deliciousbrains.com/dl/wp-migrate-db-pro-media-files-latest.zip?licence_key=my-license&site_url=my-site.tld"
},
"require": {
"composer/installers": "~1.2.0"
}
}
}],
"require": {
"php": ">=5.6",
"composer/installers": "~1.2.0",
"vlucas/phpdotenv": "^2.0.1",
"johnpbloch/wordpress": "^4.9",
"oscarotero/env": "^1.0",
"roots/wp-password-bcrypt": "*",
"deliciousbrains/wp-migrate-db-pro": "*",
"deliciousbrains/wp-migrate-db-pro-media-files": "*"
},