Apply Drupal 8 patch using Composer without updating package version

d8-composer-patch-without-version-update.md

1. edit the composer.json file to add a patch.

"extra": {
    "enable-patching": true,
    "patches": {
        "drupal/core": {
            "<patch1 information>": "<patch1 file path>",
            "<patch2 information>": "<patch2 file path>"
        }
     }
}

2. composer install

After composer install, sometimes composer.lock file might not be updated with latest patch information.

3. composer update --lock

This will generate composer.lock file from composer.json with latest patch additions.

Same steps used to apply patch for a module.