Update the instructions on composer and updating dependencies to be current.
Composer install will use composer.lock so you can't just edit the json
When composer requiring roots/wordpress since becoming a metapackage it must include -W with all dependencies to update the sub package
Using composer require is the cleanest way to update the composer.json and composer.lock to avoid possible issues updating other dependencies which can happen when running composer update
Included example of composer requiring specific version which can be used to rollback plugins or WordPress
Update the instructions on composer and updating dependencies to be current.
roots/wordpresssince becoming a metapackage it must include-Wwith all dependencies to update the sub packagecomposer.jsonandcomposer.lockto avoid possible issues updating other dependencies which can happen when running composer update