-

[ro0NL]

[rarkins]

It's not possible to do that if you use ranges and lock file maintenance. Renovate deletes the lock file and lets npm recreate it, so there's no way to ask npm to hold back certain packages

Solution: Pin your package.json dependencies if that's what you're after

[rarkins]

The logic I described is the same for all managers. Running composer update multiple times won't get you the same result as a full refresh.

Latest range is not the same as pinned deps, if it were then you wouldn't have needed to create this discussion. If dependencies were pinned, they would not have been updated during lock file maintenance.