Skip updating certain themes/modules on composer update
If you want to pin a version of a module you could do so by running this in your console:
composer require drupal/module_name:1.1

In case you have many modules also see my contributed module:
Composer Update Assistent
This module generates a commando to update all modules to the recommended version which can be copied to your console.