As explained in the section "Installing dependencies" composer keeps track of the exact versions of the dependencies.
Sometimes you want to update the dependencies that composer installs to a newer version (but still following the version constraints in the composer.json file).
That can be done by executing the composer "update" command:
$ composer update
The update command will install the newest versions that are available considering the constraints. It will also update the composer.lock file to reflect the newly installed versions.
*** Do not use this command to install the dependencies! ***