Prevent updates when requiring drupal/core-vendor-hardening

test-and-deploy.yml

@@ -203,7 +203,7 @@ Debug:
     # Add the Drupal Vendor Hardening Composer Plugin.
     # see https://github.com/drupal/core-vendor-hardening
     - composer config --no-interaction allow-plugins.drupal/core-vendor-hardening true
-    - composer require --no-interaction --no-progress drupal/core-vendor-hardening
+    - composer require --no-update --no-interaction --no-progress drupal/core-vendor-hardening
   artifacts:
     name: build-prod
     when: always