How to Prevent Composer from Updating Plugin?
If you have version 1.2.3 of the plugin installed and you don't want to Composer to update past that version, you'd just modify your composer.json file so it's locked to that exact version.

"require": {
    "plugindeveloper/pluginhandle": "1.2.3"
}