How can I prevent my client from auto-updating Craft in production? How can I prevent my client from auto-updating Craft in production? I don't want them to run Craft updates on the production site, but the "updates" badge seems irresistible to them. I would prefer to run Craft updates in my dev environment, version control with Git, test, and then deploy at my leisure.
You can use the config/general.php file to specify whether auto-updating is allowed:

Craft 2

'allowAutoUpdates' =&gt; false



  https://docs.craftcms.com/v2/config-settings.html#allowAutoUpdates


Craft 3

'allowUpdates' =&gt; false



  https://docs.craftcms.com/api/v3/craft-config-generalconfig.html#property-allowupdates


Combined with a multi-environment configuration, this can be very helpful.

Admittedly, this doesn't prevent the "Updates are available" notification from appearing... There have been some discussions about future versions of Craft possibly adding a separate config setting which will allow you to disable that notification as well.