Composer updates .htaccess file when updating

One way to append your changes at end of .htaccess file once its been updated by scaffold.

htaccess-custom-changes.txt contains your custom changes require to add.

"drupal-scaffold": {
  "file-mapping": {
    "[web-root]/.htaccess": {
      "append": "patches/htaccess-custom-changes.txt"
     }
}

While the accepted answer is correct and this prevent the .htacces file from being overwritten, most updates done to that files are linked to security issues. You should patch the file instead, as described in this answer : https://drupal.stackexchange.com/a/271147/25673

Here's a copy of the answer by Stef Van Looveren

In the scripts section of your composer.json file, use the following:

"post-drupal-scaffold-cmd": [
  "patch -p0 < patches/htaccess.patch"
]

(this requires "drupal-composer/drupal-scaffold" in your require section)

 "extra": {
   "drupal-scaffold": { 
       "source": "http://cgit.drupalcode.org/drupal/plain/{path}?h={version}", 
       "excludes": [ ".htaccess", "robots.txt" ]
       }
}

Put this above code in your composer.json file.