[wp-trac] [WordPress Trac] #55185: Auto-updates despite disabled

[WordPress Trac]

#55185: Auto-updates despite disabled
--------------------------+------------------------------
 Reporter:  Psychosopher  |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Plugins       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  close         |     Focuses:
--------------------------+------------------------------
Changes (by SergeyBiryukov):

 * keywords:   => close
 * component:  General => Plugins


Comment:

 Hi there, welcome back to WordPress Trac!

 This is explained in the [https://wordpress.org/support/article
 /configuring-automatic-background-updates/#plugin-theme-updates-via-filter
 Configuring Automatic Background Updates] support article:
 > By default, automatic background updates only happen for plugins and
 themes in special cases, as determined by the WordPress.org API response,
 which is controlled by the WordPress security team for patching critical
 vulnerabilities. To enable or disable updates in all cases, you can
 leverage the `auto_update_$type` filter, where `$type` would be replaced
 with “plugin” or “theme”.

 Based on the linked support topic, it looks like patching a securiy issue
 in the plugin is exactly what happened here, which is why an automatic
 update was pushed even if it was not explicitly enabled.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/55185#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform