Update webform without composer
Before doing any updates, make sure that you've backed up your production site to avoid loss of data. Also make sure that you have an easy way to restore the backups (:

Solution 1

You can replicate the site on your local dev environment. Then, apply the updates using composer and upload the relevant files to the prod site.

Solution 2

You can use drush up MODULENAME to update specific modules. However, make sure you've tested the updates on a dev site. However, some modules have dependencies which need to updated separately. It is for these dependencies that people recommend using composer for updating Drupal packages.