What have composer did?

Your composer.json will indicate which version you have it set for. If it is just a * then it will just upgrade to whatever version.

composer update

is the command to update, but you should always read the release notes to make sure an update won't break something.