Composer updates .htaccess file when updating
"extra": {
   "drupal-scaffold": { 
       "source": "http://cgit.drupalcode.org/drupal/plain/{path}?h={version}", 
       "excludes": [ ".htaccess", "robots.txt" ]
       }
}


Put this above code in your composer.json file.