Site Kit automatically updated without being asked to do so?

Hi there @raspberryade, thanks for getting in touch and for explaining what happened with your Site Kit plugin. If you already have the auto-updates disabled from the plugins section, it’s possible that auto-updates are enabled on your hosting platform. Can I check with you if you have checked this? If not, then I would suggest checking this as some hosting platforms provide this setting.

Please also feel free to share your?Site Health information. You can?use this form?to share privately if preferred. I can check this to see if anything stands out but it sounds like there is an auto-update plugin setting switched on perhaps at host level.

Let me know how you get on with the above and if you have any questions in the meantime.

@adamdunnage ; Thank you for your response.

“If you already have the auto-updates disabled from the plugins section, it’s possible that auto-updates are enabled on your hosting platform”

This is unlikely; we both installed and administer WordPress ourselves and it runs via Apache- which we also installed and administer ourselves- on a standard Ubuntu Server-based VPS, again, self-administered.

Also, we’ve never had this happen before, not even from the Site Kit plugin itself.

We have WordPress itself set to auto-update, but not any of the plugins.

All that Site Health tells us that’s relevant here is that some plugins require updating, mainly because they’re not set to do so themselves.

@raspberryade That’s interesting to know thanks for sharing. Is there any particular reason you didn’t want to update the Site Kit plugin for your site? We always recommend updating to the latest version. If you are having any issues with the latest version then please let us know and we will be happy to assist you with this.

If you don’t have any issues with the latest version then I’d suggest just keeping an eye on this to see if the same happens again with our next release. If it does, let us know and we can take another look but as I say it’s always good to be up to date with the latest version so you can get the most out of the plugin and the newest updates and features.

Let me know if you have any further questions.

@adamdunnage

Is there any particular reason you didn’t want to update the Site Kit plugin for your site?

I never said that.

Frankly, the update itself in this case appears to have been no big deal and I’d have been happy to apply it manually.

However, I’d rather have been able to review and make such choices myself, which is why auto-updates were turned off in the first place (amongst other reasons).

And even that wasn’t my only concern- as I said, we administer this site and server ourselves, so when I see something doing something it shouldn’t be like this, it’s something I want to check out if nothing else.

I can confirm that I observed this auto-update to 1.144.0 version on my end as well. This has never happened with this plugin before.

It is not a big deal to me either. I am not a plugin dev, but perhaps plugin authors “have” the ability to override user setting in case of security risk? Perhaps some specific value when pushing update? I am not sure, just guessing.

@raspberryade I understand and thanks for clarifying. I appreciate that you’d of course like to be able to review and make these changes yourself. The plugin should not be auto-updating if you have this option in WordPress disabled.

As the plugin has already updated it’s hard for us to look into this but it’s worth keeping an eye on to see if this happens again with the next update.

I have also mentioned this to the internal team to make sure that nothing chnaged on our side could have caused this so if we find anything we will address it and I will update here.

Thanks for raising this and we will let you know if we find anything.