How can I prevent my client from auto-updating Craft in production? I don't want them to run Craft updates on the production site, but the "updates" badge seems irresistible to them. I would prefer to run Craft updates in my dev environment, version control with Git, test, and then deploy at my leisure.
You can use the
config/general.php file to specify whether auto-updating is allowed:
'allowAutoUpdates' => false
'allowUpdates' => false
Combined with a multi-environment configuration, this can be very helpful.
Admittedly, this doesn't prevent the "Updates are available" notification from appearing... There have been some discussions about future versions of Craft possibly adding a separate config setting which will allow you to disable that notification as well.