You have to differentiate between composer install --no-dev and composer update --no-dev
When you use composer install --no-dev, you have to define a new version in composer.json beforehand.
Have a look to Wiki entry Anleitung: Composer für Shopbetreiber