On irc bill-auger suggested uninstalling geoclue first.

Turns out that if I do uninstall geoclue (and packages which depend on it), I can upgrade, but now if I try to install xdg-desktop-portal I get the message:

:: geoclue and your-privacy are in conflict.
  Remove your-privacy? [y/N]

this is probably related to some open tickets that freemor was working on (eg: #2580) - IIRC, the idea was to try the experimental nonprism-testing/geoclue; and if that works (it disables geo-location), then nonprism-testing/geoclue could be moved to nonprism, and your-privacy would not need to block geoclue

for now, you may need to uninstall some fancy things to use nonprism, such as GNOME, KDE, flatpak - NOTE: this command may uninstall or break your desktop - after reviewing the list of packages to be removed, you can decide to re-reun the command without --print

# pacman -Rcss xdg-desktop-portal --print

if you are brave and want to verify theova's review and you know how to read wireshark, you could try the experimental geoclue fake:

# pacman -R your-privacy
# pacman -Syuu nonprism-testing/geoclue

otherwise, this is probably 'not-a-bug'; but simply 'your-privacy' doing its job, which includes preventing to install programs which use geo-location - in that case, xdg-desktop-portal would need to be added to the nonprism blacklist - that would prevent installing several other programs such as cinnamon, flatpak, gnome-builder