Problem/Motivation

According to Drupal's Available Updates page there is an update (8.x-1.4) for User Protect, I'm currently running 8.x-1.3. When I run composer update it tells me there's "Nothing to install, update or remove".

I checked my composer.json file to see what version I was requiring and it's set to "drupal/userprotect": "^1.1" which should work but just in case I ran composer require 'drupal/userprotect:^1.4' and got the following:

./composer.json has been updated
Running composer update drupal/userprotect
Gathering patches for root package.
No patches supplied.
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires drupal/userprotect ^1.4, found drupal/userprotect[dev-1.x, 1.x-dev (alias of dev-1.x)] but it does not match your minimum-stability.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

Installation failed, reverting ./composer.json and ./composer.lock to their original content.

I also tried composer clear-cache and required '--with-all-dependencies' but it made no difference.

If it helps I'm running Drupal 10.6.3 on PHP 8.3. Role Delegation 8.x-1.6 is also installed.

I tried googling and one suggestion was that there may be issues with the repo configuration, hence why I'm posting here...

Edit: FYI:

$ composer --version
Composer version 2.9.5 2026-01-29 11:40:53
PHP version 8.3.30 (/usr/bin/php8.3)
Run the "diagnose" command to get more detailed diagnostics output.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Comments

skwebdev created an issue. See original summary.

skwebdev’s picture

skwebdev commented
Issue summary: View changes
megachriz’s picture

megachriz
Primary language Dutch
commented

I experience the same issue. According to Composer, the 1.4.0 version does not exist:

→ composer show drupal/userprotect --all
name     : drupal/userprotect
descrip. : Allows admins to protect users from being edited or cancelled, on a per-user basis.
keywords : Drupal, User Management
versions : * 1.x-dev, 1.3.0, 1.2.0, 1.1.0, 1.0.0, 1.0.0-rc1, * dev-1.x
type     : drupal-module
license  : GNU General Public License v2.0 or later (GPL-2.0+) (OSI approved) https://spdx.org/licenses/GPL-2.0+.html#licenseText
homepage : https://www.drupal.org/project/userprotect
source   : [git] https://git.drupalcode.org/project/userprotect.git 8707afbb2158f0b7f969204189c98e6c54f9258c
dist     : []  
path     : /foo/web/modules/contrib/userprotect
names    : drupal/userprotect

support
source : https://git.drupalcode.org/project/userprotect
issues : https://www.drupal.org/project/issues/userprotect

requires
drupal/core ^8.8 || ^9 || ^10 || ^11

requires (dev)
drupal/role_delegation ^1.0

So I think it is a packaging issue. I just asked a question about it on Drupal Slack in the #drupal-infrastructure channel:
https://drupal.slack.com/archives/C51GNJG91/p1772621509893039

megachriz’s picture

megachriz
Primary language Dutch
commented
Status: Active » Fixed

On the day of the release there was a migration of data on drupal.org happening which may have caused the issue.

@drumm fixed the issue by resaving the release node:

It is available now. I saved the release node to re-trigger packaging and that updated it. It is likely that the outage impacted this

composer show drupal/userprotect --all now lists 1.4.0, so this should be fixed now.

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.