Change record status: 
Introduced in branch: 
8.x-2.x
Introduced in version: 
8.x-2.6
Description: 
  1. The default value for cron was changed from \Drupal\automatic_updates\CronUpdater::SECURITY to \Drupal\automatic_updates\CronUpdater::DISABLED in automatic_updates.settings.yml. This means that configuration now defaults to disabling automatic updates rather than allowing security updates to be applied. But CronUpdater::getMode() hardcoded that to override it to \Drupal\automatic_updates\CronUpdater::DISABLED. For >99% of existing sites, there is no difference in behavior.
  2. For the <1% of sites that were overriding \Drupal\automatic_updates\CronUpdater::getMode to respect the existing configuration, this may disable cron updates for them. They will need to modify their configuration.
Impacts: 
Site builders, administrators, editors
Module developers
Site templates, recipes and distribution developers