Why Drupal's Automatic Updates Wasn't Running: `Unattended background updates` Is Disabled by Default
I assumed having Drupal's Automatic Updates module installed meant security updates would just land. They weren't. The cron-time policy `Unattended background updates` ships disabled by default, so the module was effectively idle. This post records the diagnosis, the configuration that finally let 10.6.3 → 10.6.7 apply automatically, and the 'not officially supported' warning that surfaces once you turn it on.
drupalautomatic-updatessecuritycron