Zend certified PHP/Magento developer

Is there a way to configure a dependency in `composer.json` so that it doesn’t cause a file change in `composer.lock`? E.g. lock stores a git tag rather than `composer update` constantly changing commit hashes (messes with git a lot).