notify only of plugin security updates

There is no common concept for ‘security’ update or even ‘changelogs’ in wp plugin development.

Basically it is up to the developer of a plugin to provide information on changes. Some add security notices, some tend to simply hide serious issues.

Therefore I would deem it impossible to distinguish between update types.

Seen to many ‘someone-can-read-my-database’-level issues brushed of as minor-release or patch level with nothing but a ‘code cleanup’ label.

Thanks for the thoughtful and informative response.