Backup to Acquia dev desktop local site
Take a copy of htaccess to preserve customisation
-- On local site --
navigate to directory above public_html
run composer outdated or composer outdated 'drupal/*'
composer update --with-dependencies drupal/commerce drupal/commerce_price drupal/commerce_product drupal/commerce_order drupal/commerce_payment drupal/commerce_payment_example drupal/commerce_checkout drupal/commerce_tax drupal/commerce_cart drupal/commerce_log drupal/commerce_store drupal/commerce_promotion drupal/commerce_number_pattern