Publishers publish new package versions under a listing. Your library can point at an older package until you explicitly adopt the newer release.
Adopt ≠ deploy
Adopting updates the entitlement in My components. Open each website’s Components page to activate or refresh the install — Install on a website.
Typical flow
Publisher releases
A new semver package appears on the listing. See Releases & updates.
Adopt in the library
From My components / entitlement detail, adopt the release you want.
Update websites
Per website, confirm the install still points at the entitlement and is active.