Is it safe to run 'composer update' on my Lightning and Site Studio site?
Running the composer update command will update any composer packages that have newer versions available.
Composer update does depend on the package version constraints set in your website's composer.json file. Please refer to the composer documentation: https://getcomposer.org/doc/