Upgrading to Thunder 8.x-3.0-rc1

Hello,

I'm trying to upgrade from Thunder 8.x-2.47 to Thunder 8.x-3.0-rc1. I've tried several scenarios and reinstalls of my development database as I am trying to move to production with Thunder. I am told by Composer that I had to have the latest version of Thunder 2 before moving to Thunder 3. I now have the latest version of Thunder 2 (2.47) but still cannot upgrade to recommended Thunder 3.

I had to create my project using composer create-project burdamagazinorg/thunder-project because that one had the latest available Thunder 2 but no 3+ version while composer create-project thunder/thunder-project only had Thunder 3+ but no 2+ version.

Can someone provide the proper process to update Thunder without breaking my site and go from Thunder 2+ to Thunder 3+ with Composer?

There are several modules attached to Thunder 2+ that have major security holes such as Simple XML sitemap and Media Pinterest, as well as Paragraphs module being the old version. I cannot update these modules because Thunder will not allow this according to composer but I also cannot upgrade to Thunder 3.0+ because there are no updates available according to Composer. I've tried several dry runs including "composer update thunder/thunder-project thunder" and "composer update burdamagazinorg/thunder".

I often get conflicts like the following when try to plug these security holes from modules.

[mysitepathincommandline]composer require drupal/simple_sitemap:^3.3
./composer.json has been updated
> DrupalProject\composer\ScriptHandler::checkComposerVersion
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Installation request for drupal/simple_sitemap ^3.3 -> satisfiable by drupal/simple_sitemap[3.x-dev, 3.3.0].
    - burdamagazinorg/thunder 8.2.47 requires drupal/simple_sitemap ^2.0 -> satisfiable by drupal/simple_sitemap[2.x-dev].
    - burdamagazinorg/thunder 8.2.47 requires drupal/simple_sitemap ^2.0 -> satisfiable by drupal/simple_sitemap[2.x-dev].
    - burdamagazinorg/thunder 8.2.47 requires drupal/simple_sitemap ^2.0 -> satisfiable by drupal/simple_sitemap[2.x-dev].
    - Conclusion: don't install drupal/simple_sitemap 2.x-dev
    - Installation request for burdamagazinorg/thunder (locked at 8.2.47, required as ^8.2) -> satisfiable by burdamagazinorg/thunder[8.2.47].

Again, can someone provide the proper process to update Thunder without breaking my site and go from Thunder 2+ to Thunder 3+ with Composer?

Thanks in advance