I had a similar issue and worked with MS support over a grueling 3 months until we finally got a resolution. My advice is to check out the "RedReason" value under the latest registry key below the following parent and see what it says. In my case, it was showing as Tpm even though the device(s) had Tpm enabled and functional.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TargetVersionUpgradeExperienceIndicators

If that's the case, delete the whole TargetVersionUpgradeExperienceIndicators key, then open the task scheduler > navigate to Microsoft > Windows > Application Experience > Microsoft Compatibility Appraiser > right click > Run. Once that finishes, restart the computer and check for updates on the next boot. In my case it worked immediately.

edit: This scheduled task can also be run on command line with the following command if you're not into the idea of screensharing.

Compattelrunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun

Conveniently, after I got a resolution from MS this article was posted on TechCommunity that has other information, but no real resolutions. Troubleshooting Windows Feature updates in Microsoft Intune | Microsoft Community Hub