$ composer outdated "drupal/*"
Info from https://repo.packagist.org: #StandWithUkraine
Color legend:
- patch or minor release available - update recommended
- major release available - update possible
drupal/core                   9.3.9  9.3.12 Drupal is an open source content management platform powering millions of websites and applications.
drupal/core-composer-scaffold 9.3.9  9.3.12 A flexible Composer project scaffold builder.
drupal/core-dev               9.3.9  9.3.12 require-dev dependencies from drupal/drupal; use in addition to drupal/core-recommended to run te...
drupal/core-project-message   9.3.9  9.3.12 Adds a message after Composer installation.
drupal/core-recommended       9.3.9  9.3.12 Locked core dependencies; require this project INSTEAD OF drupal/core.
drupal/core-vendor-hardening  8.9.20 9.3.12 Hardens the vendor directory for when it's in the docroot.

$ composer update drupal/core "drupal/core-*" --with-all-dependencies
Loading composer repositories with package information
Updating dependencies
Lock file operations: 0 installs, 18 updates, 0 removals
  - Upgrading behat/mink (v1.9.0 => v1.10.0)
  - Upgrading behat/mink-selenium2-driver (v1.5.0 => v1.6.0)
  - Upgrading composer/composer (2.2.9 => 2.2.12)
  - Upgrading drupal/core (9.3.9 => 9.3.12)
  - Upgrading drupal/core-composer-scaffold (9.3.9 => 9.3.12)
  - Upgrading drupal/core-dev (9.3.9 => 9.3.12)
  - Upgrading drupal/core-project-message (9.3.9 => 9.3.12)
  - Upgrading drupal/core-recommended (9.3.9 => 9.3.12)
  - Upgrading instaclick/php-webdriver (1.4.10 => 1.4.14)
  - Upgrading justinrainbow/json-schema (5.2.11 => 5.2.12)
  - Upgrading phpdocumentor/type-resolver (1.6.0 => 1.6.1)
  - Upgrading phpstan/phpdoc-parser (1.2.0 => 1.4.5)
  - Upgrading phpunit/phpunit (9.5.19 => 9.5.20)
  - Upgrading sebastian/environment (5.1.3 => 5.1.4)
  - Upgrading seld/jsonlint (1.8.3 => 1.9.0)
  - Upgrading slevomat/coding-standard (7.0.20 => 7.1)
  - Upgrading symfony/lock (v4.4.38 => v4.4.40)
  - Upgrading symfony/phpunit-bridge (v5.4.3 => v5.4.7)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 0 installs, 18 updates, 0 removals
  - Downloading drupal/core (9.3.12)
  - Downloading symfony/phpunit-bridge (v5.4.7)
  - Downloading symfony/lock (v4.4.40)
  - Downloading sebastian/environment (5.1.4)
  - Downloading phpdocumentor/type-resolver (1.6.1)
  - Downloading phpunit/phpunit (9.5.20)
  - Downloading justinrainbow/json-schema (5.2.12)
  - Downloading instaclick/php-webdriver (1.4.14)
  - Downloading behat/mink (v1.10.0)
  - Downloading phpstan/phpdoc-parser (1.4.5)
  - Downloading slevomat/coding-standard (7.1)
  - Downloading seld/jsonlint (1.9.0)
  - Downloading composer/composer (2.2.12)
  - Downloading behat/mink-selenium2-driver (v1.6.0)
  - Upgrading drupal/core-composer-scaffold (9.3.9 => 9.3.12): Extracting archive
  - Upgrading drupal/core-project-message (9.3.9 => 9.3.12): Extracting archive
  - Upgrading drupal/core (9.3.9 => 9.3.12): Extracting archive
  - Upgrading symfony/phpunit-bridge (v5.4.3 => v5.4.7): Extracting archive
  - Upgrading symfony/lock (v4.4.38 => v4.4.40): Extracting archive
  - Upgrading sebastian/environment (5.1.3 => 5.1.4): Extracting archive
  - Upgrading phpdocumentor/type-resolver (1.6.0 => 1.6.1): Extracting archive
  - Upgrading phpunit/phpunit (9.5.19 => 9.5.20): Extracting archive
  - Upgrading justinrainbow/json-schema (5.2.11 => 5.2.12): Extracting archive
  - Upgrading instaclick/php-webdriver (1.4.10 => 1.4.14): Extracting archive
  - Upgrading behat/mink (v1.9.0 => v1.10.0): Extracting archive
  - Upgrading phpstan/phpdoc-parser (1.2.0 => 1.4.5): Extracting archive
  - Upgrading slevomat/coding-standard (7.0.20 => 7.1): Extracting archive
  - Upgrading seld/jsonlint (1.8.3 => 1.9.0): Extracting archive
  - Upgrading composer/composer (2.2.9 => 2.2.12): Extracting archive
  - Upgrading behat/mink-selenium2-driver (v1.5.0 => v1.6.0): Extracting archive
  - Upgrading drupal/core-dev (9.3.9 => 9.3.12)
  - Upgrading drupal/core-recommended (9.3.9 => 9.3.12)
    Cleaning: symfony/phpunit-bridge
    Cleaning: sebastian/environment
    Cleaning: phpunit/phpunit
    Cleaning: justinrainbow/json-schema
    Cleaning: instaclick/php-webdriver
    Cleaning: behat/mink
    Cleaning: seld/jsonlint
    Cleaning: composer/composer
    Cleaning: behat/mink-selenium2-driver
Package container-interop/container-interop is abandoned, you should avoid using it. Use psr/container instead.
Package doctrine/reflection is abandoned, you should avoid using it. Use roave/better-reflection instead.
Generating autoload files
Hardening vendor directory with .htaccess and web.config files.
86 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
Cleaning vendor directory.

このあと、update.php