@turtlepod @williamsba DISALLOW_FILE_MODS should work. As would AUTOMATIC_UPDATER_DISABLED set to true and automatic_updater_disabled filter. @williamsba — How do you have updates disabled?

@turtlepod @williamsba I’m digging through Core’s code now. FTR, the versions released today were *only* the security patch. The WP team is very clear that, for them to push, it…

@TheCre8tiveDiva @jesephm @jetpack This is the same as other past security releases for w.org repo plugins, which will auto-update outside of the relatively newer auto-update settings for regular updates.

@TheCre8tiveDiva @jesephm @jetpack After discovering the security issue, we reached out to the WordPress Plugins team to advise them of the issue. They advised that we create point releases for…

@jason_coleman @williamsba After explaining the issue to the plugins team, they advised that we create versions for all previous versions impacted and work with the Meta group to get the…

@jason_coleman @williamsba FTR, Jetpack did not autoupdate itself. The WordPress core team marked the new versions as autoupgradable in the API — the upgrade itself was totally on the Core…