Your install & update instructions will not work when it comes to updating.
The install command will lock the requirements at an exact version, so
composer update will have no effect. Either the install command should install a version with caret or tide, or
require should be used for update each time to a new specific version.