...
When update has completed, and local install is verified to work, make sure to version (assuming you use a version control system like git) changes done to composer.lock file. This is the file that contains all details of which versions are currently used and makes sure the same version is used among all developers, staging and eventually production when current changes are approved for production (assuming you have a workflow for this).
...