composer require doesn't update composer.lock; same with composer update

Question

The weirdness

When I attempt a normal composer require or composer update command, composer.json updates to include the required package but c