.cspell.json

+{
+  "dictionaries": ["drupal","companies", "fonts", "html", "php", "softwareTerms", "automatic_updates"],
+  "dictionaryDefinitions": [
+    { "name": "automatic_updates", "path": "./dictionary.txt"}
+  ],
+  "ignorePaths": [
+    "README.md"
+  ]
+}

.gitattributes

+/dictionary.txt export-ignore
+/scripts  export-ignore

.gitignore

+/.idea
+/auto-updates-dev

.gitlab-ci.yml

+################
+# DrupalCI GitLabCI template
+#
+# Gitlab-ci.yml to replicate DrupalCI testing for Contrib
+#
+# With thanks to:
+#   * The GitLab Acceleration Initiative participants
+#   * DrupalSpoons
+################
+
+################
+# Guidelines
+#
+# This template is designed to give any Contrib maintainer everything they need to test, without requiring modification. It is also designed to keep up to date with Core Development automatically through the use of include files that can be centrally maintained.
+#
+# However, you can modify this template if you have additional needs for your project.
+################
+
+################
+# Includes
+#
+# Additional configuration can be provided through includes.
+# One advantage of include files is that if they are updated upstream, the changes affect all pipelines using that include.
+#
+# Includes can be overridden by re-declaring anything provided in an include, here in gitlab-ci.yml
+# https://docs.gitlab.com/ee/ci/yaml/includes.html#override-included-configuration-values
+################
+
+include:
+  ################
+  # DrupalCI includes:
+  # As long as you include this, any future includes added by the Drupal Association will be accessible to your pipelines automatically.
+  # View these include files at https://git.drupalcode.org/project/gitlab_templates/
+  ################
+  - project: $_GITLAB_TEMPLATES_REPO
+    # "ref" value can be:
+    # - Recommended (default) - `ref: $_GITLAB_TEMPLATES_REF` - The Drupal Association will update this value to the recommended tag for contrib.
+    # - Latest - `ref: main` - Get the latest additions and bug fixes as they are merged into the templates.
+    # - Minor or Major latests - `ref: 1.x-latest` or `ref: 1.0.x-latest` - Get the latest additions within a minor (mostly bugfixes) or major (bugs and new features).
+    # - Fixed tag - `ref: 1.0.1` - Set the value to a known tag. This will not get any updates.
+    # If you change the default value of ref, you should set the _CURL_TEMPLATES_REF variable in the variables section to be the same as set here.
+    ref: $_GITLAB_TEMPLATES_REF
+    file:
+      - '/includes/include.drupalci.main.yml'
+      # EXPERIMENTAL: For Drupal 7, remove the above line and uncomment the below.
+      # - '/includes/include.drupalci.main-d7.yml'
+      - '/includes/include.drupalci.variables.yml'
+      - '/includes/include.drupalci.workflows.yml'
+
+################
+# Pipeline configuration variables
+#
+# These are the variables provided to the Run Pipeline form that a user may want to override.
+#
+# Docs at https://git.drupalcode.org/project/gitlab_templates/-/blob/1.0.x/includes/include.drupalci.variables.yml
+################
+variables:
+  _PHPUNIT_CONCURRENT: '1'
+  _PHPUNIT_TESTGROUPS: ''
+  # Always test against the previous minor version of core.
+  OPT_IN_TEST_PREVIOUS_MINOR: '1'
+  # @todo Remove this line when https://drupal.org/i/3414093 is fixed.
+  CI_DEBUG_SERVICES: "true"
+  _TARGET_DB_TYPE: "mariadb"
+  _TARGET_DB_VERSION: "10.6"
+  # Always show environment variables, to help in debugging CI problems.
+  _SHOW_ENVIRONMENT_VARIABLES: '1'
+
+
+###################################################################################
+#
+#                                        *
+#                                       /(
+#                                      ((((,
+#                                    /(((((((
+#                                   ((((((((((*
+#                                ,(((((((((((((((
+#                              ,(((((((((((((((((((
+#                            ((((((((((((((((((((((((*
+#                         *(((((((((((((((((((((((((((((
+#                       ((((((((((((((((((((((((((((((((((*
+#                    *((((((((((((((((((  .((((((((((((((((((
+#                  ((((((((((((((((((.       /(((((((((((((((((*
+#                /(((((((((((((((((            .(((((((((((((((((,
+#             ,((((((((((((((((((                 ((((((((((((((((((
+#           .((((((((((((((((((((                   .(((((((((((((((((
+#          (((((((((((((((((((((((                     ((((((((((((((((/
+#        (((((((((((((((((((((((((((/                    ,(((((((((((((((*
+#      .((((((((((((((/  /(((((((((((((.                   ,(((((((((((((((
+#     *((((((((((((((      ,(((((((((((((/                   *((((((((((((((.
+#    ((((((((((((((,          /(((((((((((((.                  ((((((((((((((,
+#   (((((((((((((/              ,(((((((((((((*                 ,(((((((((((((,
+#  *(((((((((((((                .(((((((((((((((                ,(((((((((((((
+#  ((((((((((((/                /((((((((((((((((((.              ,((((((((((((/
+# (((((((((((((              *(((((((((((((((((((((((*             *((((((((((((
+# (((((((((((((            ,(((((((((((((..(((((((((((((           *((((((((((((
+# ((((((((((((,          /((((((((((((*      /((((((((((((/         ((((((((((((
+# (((((((((((((        /((((((((((((/          (((((((((((((*       ((((((((((((
+# (((((((((((((/     /((((((((((((               ,((((((((((((,    *((((((((((((
+#  ((((((((((((((  *(((((((((((/                   *((((((((((((.  ((((((((((((/
+#  *((((((((((((((((((((((((((,                      /(((((((((((((((((((((((((
+#   (((((((((((((((((((((((((                         ((((((((((((((((((((((((,
+#   .(((((((((((((((((((((((/                         ,(((((((((((((((((((((((
+#     ((((((((((((((((((((((/                         ,(((((((((((((((((((((/
+#      *(((((((((((((((((((((                         (((((((((((((((((((((,
+#       ,(((((((((((((((((((((,                      ((((((((((((((((((((/
+#         ,(((((((((((((((((((((*                  /((((((((((((((((((((
+#            ((((((((((((((((((((((,           ,/((((((((((((((((((((,
+#              ,(((((((((((((((((((((((((((((((((((((((((((((((((((
+#                 .(((((((((((((((((((((((((((((((((((((((((((((
+#                     .((((((((((((((((((((((((((((((((((((,.
+#                          .,(((((((((((((((((((((((((.
+#
+###################################################################################
+
+.extra-variables: &extra-variables
+  - MODULE_DIR=$_WEB_ROOT/modules/custom/$CI_PROJECT_NAME
+  # Strip the `-dev` suffix out of $_TARGET_CORE to reveal the name of the Drupal core branch.
+  - CORE_BRANCH=`echo $_TARGET_CORE | sed -e "s/-dev$//"`
+
+composer:
+  extends: .composer-base
+  before_script:
+    # In this case, we want to archive everything.
+    - rm .gitattributes
+    - composer archive --file=module
+  after_script:
+    - *extra-variables
+    - rm -r -f $MODULE_DIR
+    - mkdir -p $MODULE_DIR
+    - tar -x -f module.tar -C $MODULE_DIR
+    - rm module.tar
+    - git clone https://git.drupalcode.org/project/drupal.git --depth 1 --branch $CORE_BRANCH /tmp/drupal-core
+    - cp -R /tmp/drupal-core/composer .
+    # Copy to web as well as \Drupal\Composer\Composer will expect it be there.
+    - cp -R /tmp/drupal-core/composer web
+
+composer (previous minor):
+  before_script:
+    - !reference [composer, before_script]
+  after_script:
+    - !reference [composer, after_script]
+
+composer (previous minor):
+  before_script:
+    - !reference [composer, before_script]
+  after_script:
+    - !reference [composer, after_script]
+
+phpcs:
+  before_script:
+    # Use core's PHPCS configuration.
+    - cp $_WEB_ROOT/core/phpcs.xml.dist .
+
+phpstan:
+  before_script:
+    - *extra-variables
+    # Ensure our PHPStan configuration has the correct include path to core's PHPStan configuration.
+    - sed -i "s#%rootDir%/../../../#%rootDir%/../../../$_WEB_ROOT/#" $MODULE_DIR/phpstan.neon
+
+phpunit:
+  parallel:
+    matrix:
+      - MODULE:
+          - automatic_updates_extensions
+          - automatic_updates
+          - package_manager
+        TEST_TYPE:
+          - Unit
+          - Kernel
+          - Functional
+          - FunctionalJavascript
+          - Build
+  rules:
+    # Automatic Updates Extensions has no unit or functional JavaScript tests.
+    - if: $MODULE == "automatic_updates_extensions" && ($TEST_TYPE == "Unit" || $TEST_TYPE == "FunctionalJavascript")
+      when: never
+    # Package Manager has no functional JavaScript tests.
+    - if: $MODULE == "package_manager" && $TEST_TYPE == "FunctionalJavascript"
+      when: never
+    - when: on_success
+  variables:
+    _PHPUNIT_EXTRA: '--types PHPUnit-$TEST_TYPE --module $MODULE'
+
+phpunit (previous minor):
+  rules:
+    - !reference [phpunit, rules]

DEVELOPING.md

+# Local development environment setup
+
+## Quick setup
+
+A simple setup is enough for most users to start contributing to Automatic Updates. For advanced needs, see [Customizing your setup](#customizing-your-setup) and [Alternative setup options](#alternative-setup-options).
+
+Assuming you meet the [system requirements](#system-requirements), simply run the following command <sup>[[1]](#footnote-1), [[2]](#footnote-2)</sup> from the directory you would like to install your development environment under <sup>[[3]](#footnote-3)</sup>. It will prompt for confirmation before beginning.
+
+```shell
+/bin/bash -c "$(curl -fsSL https://git.drupalcode.org/project/automatic_updates/-/raw/3.0.x/scripts/setup_local_dev.sh)"
+```
+
+That's it. The success message will display next steps.
+
+## Details and options
+
+---
+
+* [System requirements](#system-requirements)
+* [Caveats](#caveats)
+* [Customizing your setup](#customizing-your-setup)
+* [Alternative setup options](#alternative-setup-options)
+* [Maintaining your environment](#maintaining-your-environment)
+
+---
+
+### System requirements
+* A *nix-based operating system, such as Linux or macOS.
+* Drupal 10 or later.
+* Composer 2 or later. (Automatic Updates is not compatible with Composer 1.)
+* Git must be installed.
+
+### Customizing your setup
+Several details of your setup can be customized via environment variables. Set these before running [the installation command above](#local-development-environment-setup).
+
+```shell
+DRUPAL_CORE_BRANCH="10.0.x" # The branch of Drupal core that will be installed.
+DRUPAL_CORE_SHALLOW_CLONE="TRUE" # Whether or not to do a "shallow clone" of Drupal core. (Defaults to TRUE.) See note below.
+AUTOMATIC_UPDATES_BRANCH="3.0.x" # The branch of the Automatic Updates module that will be installed.
+SITE_DIRECTORY="auto_updates_dev" # The path to the directory where the dev environment will be installed.
+SITE_HOST=".test" # The path for Drupal's TRUSTED_HOST_PATTERN.
+```
+
+Note: A shallow Git clone is much smaller and therefore faster, but it removes the ability to do debugging operations such as `git bisect` or `git blame`. To recover these abilities, [you can convert your repository to a full clone after the fact](https://stackoverflow.com/questions/6802145/how-to-convert-a-git-shallow-clone-to-a-full-clone):
+
+// cSpell:disable
+```shell
+cd auto-updates-dev
+git fetch --unshallow
+```
+// cSpell:enable
+
+### Alternative setup options
+You can download the setup script first to review its contents or modify it before running it:
+
+```shell
+curl --output setup_local_dev.sh https://git.drupalcode.org/project/automatic_updates/-/raw/3.0.x/scripts/setup_local_dev.sh
+
+./scripts/setup_local_dev.sh
+```
+
+You can clone the whole repository:
+
+```shell
+git clone https://git.drupalcode.org/project/automatic_updates.git
+cd automatic_updates
+
+./scripts/setup_local_dev.sh
+```
+
+To set up your environment manually, use the setup script as a reference.
+
+### Maintaining your environment
+
+* If you want to switch to a different branch of Drupal core during development or if you delete the `vendor` directory, you may will need to do this step again after running `composer install`.
+* _DO NOT_ delete the `automatic_updates` module or the `modules` directory it is in or you will lose any code changes forever. As appropriate, commit them and push them to a remote first--unless you don't care about keeping them. (Don't forget branches other than the one you have checked out.)
+
+---
+
+<a name="footnote-1"><sup>1</sup></a> When running a script downloaded from the Web, it is always wise to read its contents first. Ours ([`setup_local_dev.sh`](https://git.drupalcode.org/project/automatic_updates/-/raw/3.0.x/scripts/setup_local_dev.sh)) is documented with code comments to help with that. For a more cautious approach, see [Alternative setup options](#alternative-setup-options) above.
+
+<a name="footnote-2"><sup>2</sup></a> Curl options explained:
+[`-f, --fail`](https://curl.se/docs/manpage.html#-f),
+[`-s, --silent`](https://curl.se/docs/manpage.html#-s),
+[`-S, --show-error`](https://curl.se/docs/manpage.html#-S),
+[`-L, --location`](https://curl.se/docs/manpage.html#-L).
+
+<a name="footnote-3"><sup>3</sup></a> For example, run it in `~/Projects` to create your environment at `~/Projects/auto-updates-dev` or `/var/www` to create it at `/var/www/auto-updates-dev`. See [Customizing your setup](#customizing-your-setup) to override this behavior.

README.md

 Automatic Updates
 ---------------
 
-### About this Module
+Package Manager is a framework for updating Drupal core and installing contributed modules and themes via Composer. It has no user interface, but it provides an API for creating a temporary copy of the current site, making changes to the copy, and then syncing those changes back into the live site.
 
-Updating a Drupal site is difficult, time-consuming, and expensive. It is a
-tricky problem that, on its face appears easy, however, ensuring secure and
-reliable updates that give assurance to site owners and availability to site
-visitors.
-
-The Automatic Updates module is not yet in core. In its initial form, it is
-being made available as a contributed module. Please note that Automatic Updates
-is a [Strategic Initiative](https://www.drupal.org/project/ideas/issues/2940731)
-for the Drupal Project. The Initiative is still in progress and additional
-features and bug fixes are regularly added.
-
-The primary use case for this module:
-
-- **Public service announcements (PSAs)**
-
-Announcements for highly critical security releases for core and contrib modules
-are done infrequently. When a PSA is released, site owners should review their
-sites to verify they are up to date with the latest releases and the site is in
-a good state to quickly update once the fixes are provided to the community.
-
-- **Update readiness checks**
-
-Not all sites are able to always update. The readiness checks are an automated
-method to determine if a site is ready for automatically updating once a new
-release is provided to the community. For example, sites that have un-run
-database updates, are mounted on read only filesystems or do not have sufficient
-disk space to update in-place can't receive automatic updates. If your site is
-failing readiness checks and a PSA is released, it is important to resolve the
-underlying readiness issues so the site can quickly be updated.
-
-- **In-Place Updates**
-
-Once the PSA service has notified a Drupal site owner of an available update,
-and the readiness checks have confirmed that the site is ready to be updated,
-the Automatic Update service can then apply the update.
-
-
-### Goals
-
-The Automatic Update service for Drupal aims to simplify the update process and
-provide confidence that an update will apply cleanly.
-
-
-### Demo
-
-> [Watch a demo](https://youtu.be/fT2--EBhzuE) of the module from DriesNote at
-> DrupalCon Amsterdam 2019.
-
-
-### Installing the Automatic Updates Module
+### Automatic Updates Initiative
 
-1. Copy/upload the automatic_updates module to the modules directory of your
-   Drupal installation.
+Follow and read more on the [Automatic Updates Initiative overview and roadmap](https://www.drupal.org/project/ideas/issues/2940731).
 
-1. Enable the 'Automatic Updates' module in 'Extend' (/admin/modules).
+### Updating contrib modules and themes
 
-1. Configure the module to enable PSA notifications, readiness checks and
-   in-place updates (/admin/config/automatic_updates).
+Automatic Updates includes a sub-module, Automatic Updates Extensions, which supports updating contributed modules and themes.
 
+⚠️ ☢️️ Depending on the contributed module or theme, updates to these projects could make the site inoperable. If possible, it is highly recommended that you test these updates in a development environment first.☢️ ⚠️
 
-### Automatic Updates Initiative
+### More info
 
-- Follow and read up on
-  [Ideas queue - Automatic Updates initiative](https://www.drupal.org/project/ideas/issues/2940731)
+Get more details about the Package Manager module, once installed, at it help page (`admin/help/package_manager`).

artifacts/keys/root.pub

-untrusted comment: signify public key
-RWQVj5RBijXj1b4WXWOlakzu1EzALf24UtLk1q/D3LV0H5Uh+BP9kdHU

auto-update

+#!/usr/bin/env php
+<?php
+
+/**
+ * @file
+ * Provides a terminal command for performing automatic updates.
+ */
+
+use Drupal\automatic_updates\Commands\PostApplyCommand;
+use Drupal\automatic_updates\Commands\RunCommand;
+use Symfony\Component\Console\Application;
+
+if (PHP_SAPI !== 'cli') {
+  throw new \RuntimeException('This command must be run from the command line.');
+}
+
+// Find the autoloader. We know that Automatic Updates is installed somewhere
+// in a Drupal code base, so move up the file system until we find
+// `./vendor/autoload.php`.
+$current_dir = __DIR__;
+$previous_dir = NULL;
+while ($current_dir !== $previous_dir) {
+  $file = $current_dir . '/vendor/autoload.php';
+  if (file_exists($file)) {
+    /** @var \Composer\Autoload\ClassLoader $autoloader */
+    $autoloader = require_once $file;
+    break;
+  }
+  $previous_dir = $current_dir;
+  $current_dir = dirname($current_dir);
+}
+
+if (empty($autoloader)) {
+  throw new \RuntimeException('The autoloader could not be found. Did you run `composer install`?');
+}
+
+// Automatic Updates' namespace is not available for autoloading because it is
+// a Drupal module, which means Drupal must be booted up in order to access it.
+// Since Drupal isn't booted yet, we need to make the autoloader aware of the
+// command namespace.
+$autoloader->addPsr4('Drupal\\automatic_updates\\Commands\\', __DIR__ . '/src/Commands');
+
+$application = new Application('Automatic Updates', '3.0.0');
+$application->add(new RunCommand($autoloader));
+$application->add(new PostApplyCommand($autoloader));
+$application->setDefaultCommand('run')->run();

automatic_updates.info.yml

 name: 'Automatic Updates'
 type: module
-description: 'Display Public service announcements and verify readiness for applying automatic updates to the site.'
-core: 8.x
-core_version_requirement: ^8 || ^9
-package: 'Security'
-configure: automatic_updates.settings
+description: 'Automatically updates Drupal core.'
+core_version_requirement: ^10.1
 dependencies:
-  - drupal:system (>= 8.7)
-  - drupal:update (>= 8.7)
+  - drupal:package_manager
+  - drupal:update

automatic_updates.install

@@ -2,120 +2,53 @@
 
 /**
  * @file
- * Automatic updates install file.
+ * Contains install and update functions for Automatic Updates.
  */
 
-use Drupal\automatic_updates\ReadinessChecker\ReadinessCheckerManagerInterface;
-use Drupal\Core\StringTranslation\PluralTranslatableMarkup;
-use Drupal\Core\Url;
+declare(strict_types = 1);
+
+use Drupal\automatic_updates\CronUpdateRunner;
+use Drupal\automatic_updates\UpdateStage;
+use Drupal\automatic_updates\Validation\StatusCheckRequirements;
+use Drupal\system\SystemManager;
 
 /**
- * Implements hook_requirements().
+ * Implements hook_uninstall().
  */
-function automatic_updates_requirements($phase) {
-  // Mimic the functionality of the vendor checker procedurally since class
-  // loading isn't available pre module install.
-  $vendor_autoloader = [
-    DRUPAL_ROOT,
-    'vendor',
-    'autoload.php',
-  ];
-  if (!file_exists(implode(DIRECTORY_SEPARATOR, $vendor_autoloader))) {
-    return [
-      'not installable' => [
-        'title' => t('Automatic Updates'),
-        'severity' => REQUIREMENT_ERROR,
-        'value' => '1.x',
-        'description' => t('This module does not currently support relocated vendor folder and composer-based workflows.'),
-      ],
-    ];
-  }
-  if ($phase !== 'runtime') {
-    return NULL;
-  }
-
-  $requirements = [];
-  _automatic_updates_checker_requirements($requirements);
-  _automatic_updates_psa_requirements($requirements);
-  return $requirements;
+function automatic_updates_uninstall() {
+  \Drupal::service(UpdateStage::class)->destroy(TRUE);
 }
 
 /**
- * Display requirements from results of readiness checker.
- *
- * @param array $requirements
- *   The requirements array.
+ * Implements hook_requirements().
  */
-function _automatic_updates_checker_requirements(array &$requirements) {
-  /** @var \Drupal\automatic_updates\ReadinessChecker\ReadinessCheckerManagerInterface $checker */
-  $checker = \Drupal::service('automatic_updates.readiness_checker');
-  if (!$checker->isEnabled()) {
-    return;
-  }
+function automatic_updates_requirements($phase) {
+  if ($phase === 'runtime') {
+    // Check that site is ready to perform automatic updates.
+    /** @var \Drupal\automatic_updates\Validation\StatusCheckRequirements $status_check_requirement */
+    $status_check_requirement = \Drupal::classResolver(StatusCheckRequirements::class);
+    $requirements = $status_check_requirement->getRequirements();
 
-  $last_check_timestamp = $checker->timestamp();
-  $requirements['automatic_updates_readiness'] = [
-    'title' => t('Update readiness checks'),
-    'severity' => REQUIREMENT_OK,
-    'value' => t('Your site is ready to for <a href="@readiness_checks">automatic updates</a>.', ['@readiness_checks' => 'https://www.drupal.org/docs/8/update/automatic-updates#readiness-checks']),
-  ];
-  $error_results = $checker->getResults(ReadinessCheckerManagerInterface::ERROR);
-  $warning_results = $checker->getResults(ReadinessCheckerManagerInterface::WARNING);
-  $checker_results = array_merge($error_results, $warning_results);
-  if (!empty($checker_results)) {
-    $requirements['automatic_updates_readiness']['severity'] = $error_results ? REQUIREMENT_ERROR : REQUIREMENT_WARNING;
-    $requirements['automatic_updates_readiness']['value'] = new PluralTranslatableMarkup(count($checker_results), '@count check failed:', '@count checks failed:');
-    $requirements['automatic_updates_readiness']['description'] = [
-      '#theme' => 'item_list',
-      '#items' => $checker_results,
-    ];
-  }
-  if (\Drupal::time()->getRequestTime() > $last_check_timestamp + ReadinessCheckerManagerInterface::LAST_CHECKED_WARNING) {
-    $requirements['automatic_updates_readiness']['severity'] = REQUIREMENT_ERROR;
-    $requirements['automatic_updates_readiness']['value'] = t('Your site has not recently checked if it is ready to apply <a href="@readiness_checks">automatic updates</a>.', ['@readiness_checks' => 'https://www.drupal.org/docs/8/update/automatic-updates#readiness-checks']);
-    $readiness_check = Url::fromRoute('automatic_updates.update_readiness');
-    $time_ago = \Drupal::service('date.formatter')->formatTimeDiffSince($last_check_timestamp);
-    if ($last_check_timestamp === 0) {
-      $requirements['automatic_updates_readiness']['description'] = t('<a href="@link">Run readiness checks</a> manually.', [
-        '@link' => $readiness_check->toString(),
-      ]);
-    }
-    elseif ($readiness_check->access()) {
-      $requirements['automatic_updates_readiness']['description'] = t('Last run @time ago. <a href="@link">Run readiness checks</a> manually.', [
-        '@time' => $time_ago,
-        '@link' => $readiness_check->toString(),
-      ]);
-    }
-    else {
-      $requirements['automatic_updates_readiness']['description'] = t('Readiness checks were last run @time ago.', ['@time' => $time_ago]);
+    // Check that site has cron updates enabled or not.
+    // @todo Remove in https://www.drupal.org/project/automatic_updates/issues/3284443
+    if (\Drupal::configFactory()->get('automatic_updates.settings')->get('unattended.level') !== CronUpdateRunner::DISABLED) {
+      $requirements['automatic_updates_cron'] = [
+        'title' => t('Cron installs updates automatically'),
+        'severity' => SystemManager::REQUIREMENT_WARNING,
+        'value' => t('Enabled. This is NOT an officially supported feature of the Automatic Updates module at this time. Use at your own risk.'),
+      ];
     }
+    return $requirements;
   }
 }
 
+// BEGIN: DELETE FROM CORE MERGE REQUEST
+
 /**
- * Display requirements from Public service announcements.
- *
- * @param array $requirements
- *   The requirements array.
+ * Implements hook_update_last_removed().
  */
-function _automatic_updates_psa_requirements(array &$requirements) {
-  if (!\Drupal::config('automatic_updates.settings')->get('enable_psa')) {
-    return;
-  }
-  /** @var \Drupal\automatic_updates\Services\AutomaticUpdatesPsa $psa */
-  $psa = \Drupal::service('automatic_updates.psa');
-  $messages = $psa->getPublicServiceMessages();
-  $requirements['automatic_updates_psa'] = [
-    'title' => t('<a href="@link">Public service announcements</a>', ['@link' => 'https://www.drupal.org/docs/8/update/automatic-updates#psas']),
-    'severity' => REQUIREMENT_OK,
-    'value' => t('No announcements requiring attention.'),
-  ];
-  if (!empty($messages)) {
-    $requirements['automatic_updates_psa']['severity'] = REQUIREMENT_ERROR;
-    $requirements['automatic_updates_psa']['value'] = new PluralTranslatableMarkup(count($messages), '@count urgent announcement requires your attention:', '@count urgent announcements require your attention:');
-    $requirements['automatic_updates_psa']['description'] = [
-      '#theme' => 'item_list',
-      '#items' => $messages,
-    ];
-  }
+function automatic_updates_update_last_removed(): int {
+  return 9002;
 }
+
+// END: DELETE FROM CORE MERGE REQUEST

automatic_updates.libraries.yml

+update_status:
+  css:
+    theme:
+      css/update-status.css: {}

automatic_updates.links.menu.yml

-automatic_updates.settings:
-  title: 'Automatic updates'
-  route_name: automatic_updates.settings
-  description: 'Configure automatic update settings.'
-  parent: system.admin_config_system

automatic_updates.post_update.php

+<?php
+
+/**
+ * @file
+ * Contains post-update hooks for Automatic Updates.
+ *
+ * DELETE THIS FILE FROM CORE MERGE REQUEST.
+ */
+
+declare(strict_types = 1);
+
+/**
+ * Implements hook_removed_post_updates().
+ */
+function automatic_updates_removed_post_updates(): array {
+  return [
+    'automatic_updates_post_update_create_status_check_mail_config' => '3.0.0',
+  ];
+}

automatic_updates.routing.yml

-automatic_updates.settings:
-  path: '/admin/config/automatic_updates'
+automatic_updates.status_check:
+  path: '/admin/automatic_updates/status'
   defaults:
-    _form: '\Drupal\automatic_updates\Form\SettingsForm'
-    _title: 'Automatic Updates'
+    _controller: '\Drupal\automatic_updates\Controller\StatusCheckController::run'
+    _title: 'Update readiness checking'
   requirements:
     _permission: 'administer software updates'
   options:
-    _admin_route: TRUE
-automatic_updates.update_readiness:
-  path: '/admin/config/automatic_updates/readiness'
+    _maintenance_access: TRUE
+    _automatic_updates_status_messages: skip
+automatic_updates.confirmation_page:
+  path: '/admin/automatic-update-ready/{stage_id}'
   defaults:
-    _controller: '\Drupal\automatic_updates\Controller\ReadinessCheckerController::run'
-    _title: 'Update readiness checking...'
+    _form: '\Drupal\automatic_updates\Form\UpdateReady'
+    _title: 'Ready to update'
   requirements:
     _permission: 'administer software updates'
   options:
-    _admin_route: TRUE
-automatic_updates.inplace-update:
-  path: '/automatic_updates/in-place-update/{project}/{type}/{from}/{to}'
+    _maintenance_access: TRUE
+    _automatic_updates_status_messages: skip
+automatic_updates.finish:
+  path: '/automatic-update/finish'
   defaults:
-    _title: 'Update'
-    _controller: '\Drupal\automatic_updates\Controller\InPlaceUpdateController::update'
+    _controller: '\Drupal\automatic_updates\Controller\UpdateController::onFinish'
   requirements:
     _permission: 'administer software updates'
-    _csrf_token: 'TRUE'
   options:
-    no_cache: 'TRUE'
+    _maintenance_access: TRUE
+    _automatic_updates_status_messages: skip

automatic_updates.services.yml

 services:
-  logger.channel.automatic_updates:
-    parent: logger.channel_base
-    arguments: ['automatic_updates']
-  automatic_updates.psa:
-    class: Drupal\automatic_updates\Services\AutomaticUpdatesPsa
-    arguments:
-      - '@config.factory'
-      - '@cache.default'
-      - '@datetime.time'
-      - '@http_client'
-      - '@extension.list.module'
-      - '@extension.list.profile'
-      - '@extension.list.theme'
-      - '@logger.channel.automatic_updates'
-  automatic_updates.psa_notify:
-    class: Drupal\automatic_updates\Services\Notify
-    arguments:
-      - '@plugin.manager.mail'
-      - '@automatic_updates.psa'
-      - '@config.factory'
-      - '@language_manager'
-      - '@state'
-      - '@datetime.time'
-      - '@entity_type.manager'
-      - '@string_translation'
-  automatic_updates.cron_override:
-    class: Drupal\automatic_updates\EventSubscriber\CronOverride
-    tags:
-      - { name: config.factory.override }
-  automatic_updates.modified_files:
-    class: Drupal\automatic_updates\Services\ModifiedFiles
-    arguments:
-      - '@logger.channel.automatic_updates'
-      - '@http_client'
-      - '@config.factory'
-  automatic_updates.update:
-    class: Drupal\automatic_updates\Services\InPlaceUpdate
-    arguments:
-      - '@logger.channel.automatic_updates'
-      - '@plugin.manager.archiver'
-      - '@config.factory'
-      - '@file_system'
-      - '@http_client'
-      - '@app.root'
-  plugin.manager.database_update_handler:
-    class: Drupal\automatic_updates\DatabaseUpdateHandlerPluginManager
-    parent: default_plugin_manager
-  automatic_updates.post_update_subscriber:
-    class: Drupal\automatic_updates\EventSubscriber\PostUpdateSubscriber
-    arguments:
-      - '@config.factory'
-      - '@plugin.manager.mail'
-      - '@language_manager'
-      - '@entity_type.manager'
-    tags:
-      - { name: event_subscriber }
-
-  automatic_updates.readiness_checker:
-    class: Drupal\automatic_updates\ReadinessChecker\ReadinessCheckerManager
-    arguments:
-      - '@keyvalue'
-      - '@config.factory'
-    tags:
-      - { name: service_collector, tag: readiness_checker, call: addChecker }
+  _defaults:
+    autowire: true
 
-  # Readiness checkers.
-  automatic_updates.readonly_checker:
-    class: Drupal\automatic_updates\ReadinessChecker\ReadOnlyFilesystem
-    arguments:
-      - '@app.root'
-      - '@logger.channel.automatic_updates'
-      - '@file_system'
+  Drupal\automatic_updates\Routing\RouteSubscriber:
     tags:
-      - { name: readiness_checker, priority: 100, category: error }
-  automatic_updates.disk_space_checker:
-    class: Drupal\automatic_updates\ReadinessChecker\DiskSpace
+      - { name: event_subscriber }
+  Drupal\automatic_updates\Validation\StatusChecker:
     arguments:
-      - '@app.root'
+      # @todo Remove this when https://drupal.org/i/3325557 lands.
+      $key_value_expirable_factory: '@keyvalue.expirable'
+      $resultsTimeToLive: 24
     tags:
-      - { name: readiness_checker, category: error}
-  automatic_updates.modified_files_checker:
-    class: Drupal\automatic_updates\ReadinessChecker\ModifiedFiles
-    arguments:
-      - '@automatic_updates.modified_files'
-      - '@extension.list.module'
-      - '@extension.list.profile'
-      - '@extension.list.theme'
+      - { name: event_subscriber }
+  Drupal\automatic_updates\StatusCheckMailer: ~
+  Drupal\automatic_updates\UpdateStage:
+    calls:
+      - ['setLogger', ['@logger.channel.automatic_updates']]
+  Drupal\automatic_updates\CronUpdateRunner:
+    calls:
+      - ['setLogger', ['@logger.channel.automatic_updates']]
+    decorates: 'cron'
+  Drupal\automatic_updates\Validator\RequestedUpdateValidator:
     tags:
-      - { name: readiness_checker, category: warning}
-  automatic_updates.file_ownership:
-    class: Drupal\automatic_updates\ReadinessChecker\FileOwnership
-    arguments:
-      - '@app.root'
+      - { name: event_subscriber }
+  Drupal\automatic_updates\Validator\StagedProjectsValidator:
     tags:
-      - { name: readiness_checker, category: warning}
-  automatic_updates.pending_db_updates:
-    class: Drupal\automatic_updates\ReadinessChecker\PendingDbUpdates
+      - { name: event_subscriber }
+  Drupal\automatic_updates\ReleaseChooser: ~
+  Drupal\automatic_updates\Validator\CronFrequencyValidator:
     arguments:
-      - '@update.post_update_registry'
+      $lock: '@lock'
     tags:
-      - { name: readiness_checker, category: error}
-  automatic_updates.missing_project_info:
-    class: Drupal\automatic_updates\ReadinessChecker\MissingProjectInfo
-    arguments:
-      - '@extension.list.module'
-      - '@extension.list.profile'
-      - '@extension.list.theme'
+      - { name: event_subscriber }
+  Drupal\automatic_updates\Validator\StagedDatabaseUpdateValidator:
     tags:
-      - { name: readiness_checker, category: warning}
-  automatic_updates.opcode_cache:
-    class: Drupal\automatic_updates\ReadinessChecker\OpcodeCache
+      - { name: event_subscriber }
+  Drupal\automatic_updates\Validator\VersionPolicyValidator:
     tags:
-      - { name: readiness_checker, category: error}
-  automatic_updates.php_sapi:
-    class: Drupal\automatic_updates\ReadinessChecker\PhpSapi
-    arguments:
-      - '@state'
+      - { name: event_subscriber }
+  Drupal\automatic_updates\Validator\WindowsValidator:
     tags:
-      - { name: readiness_checker, category: warning}
-  automatic_updates.cron_frequency:
-    class: Drupal\automatic_updates\ReadinessChecker\CronFrequency
+      - { name: event_subscriber }
+  logger.channel.automatic_updates:
+    parent: logger.channel_base
+    arguments: ['automatic_updates']
+  Drupal\automatic_updates\ConsoleUpdateStage:
     arguments:
-      - '@config.factory'
-      - '@module_handler'
+      $lock: '@lock'
+      $committer: '@Drupal\automatic_updates\MaintenanceModeAwareCommitter'
+    calls:
+      - ['setLogger', ['@logger.channel.automatic_updates']]
+  Drupal\automatic_updates\MaintenanceModeAwareCommitter:
     tags:
-      - { name: readiness_checker, category: warning}
-  automatic_updates.vendor:
-    class: Drupal\automatic_updates\ReadinessChecker\Vendor
+      - { name: event_subscriber }
+  Drupal\automatic_updates\CommandExecutor:
     arguments:
-      - '@app.root'
+      $appRoot: '%app.root%'
+  Drupal\automatic_updates\Validator\ConsoleUserValidator:
     tags:
-      - { name: readiness_checker, category: error}
+      - { name: event_subscriber }

automatic_updates_extensions/automatic_updates_extensions.info.yml

+name: 'Automatic Updates Extensions'
+type: module
+description: 'Allows updates to themes and modules'
+core_version_requirement: ^10.1
+dependencies:
+  - drupal:automatic_updates

automatic_updates_extensions/automatic_updates_extensions.links.task.yml

+automatic_updates_extensions.report_update:
+  route_name: automatic_updates_extensions.report_update
+  base_route: system.admin_reports
+  title: Update Extensions
+  weight: 20
+
+automatic_updates_extensions.module_update:
+  route_name: automatic_updates_extensions.module_update
+  base_route: system.modules_list
+  title: Update Extensions
+  weight: 20
+
+automatic_updates_extensions.theme_update:
+  route_name: automatic_updates_extension.theme_update
+  base_route: system.themes_page
+  title: Update Extensions
+  weight: 20

automatic_updates_extensions/automatic_updates_extensions.routing.yml

+automatic_updates_extensions.report_update:
+  path: 'admin/reports/updates/automatic-update-extensions'
+  defaults:
+    _form: 'Drupal\automatic_updates_extensions\Form\UpdaterForm'
+    _title: 'Automatic Updates Form'
+  requirements:
+    _permission: 'administer software updates'
+  options:
+    _admin_route: TRUE
+    _automatic_updates_status_messages: skip
+
+automatic_updates_extensions.module_update:
+  path: '/admin/modules/automatic-update-extensions'
+  defaults:
+    _form: 'Drupal\automatic_updates_extensions\Form\UpdaterForm'
+    _title: 'Automatic Updates Form'
+  requirements:
+    _permission: 'administer software updates'
+  options:
+    _admin_route: TRUE
+    _maintenance_access: TRUE
+    _automatic_updates_status_messages: skip
+
+automatic_updates_extension.theme_update:
+  path: '/admin/appearance/automatic-update-extensions'
+  defaults:
+    _form: 'Drupal\automatic_updates_extensions\Form\UpdaterForm'
+    _title: 'Automatic Updates Form'
+  requirements:
+    _permission: 'administer software updates'
+  options:
+    _admin_route: TRUE
+    _maintenance_access: TRUE
+    _automatic_updates_status_messages: skip
+
+automatic_updates_extension.confirmation_page:
+  path: '/admin/automatic-update-extensions-ready/{stage_id}'
+  defaults:
+    _form: '\Drupal\automatic_updates_extensions\Form\UpdateReady'
+    _title: 'Ready to update'
+  requirements:
+    _permission: 'administer software updates'
+  options:
+    _admin_route: TRUE
+    _maintenance_access: TRUE
+    _automatic_updates_status_messages: skip

automatic_updates_extensions/automatic_updates_extensions.services.yml

+services:
+  _defaults:
+    autowire: true
+
+  Drupal\automatic_updates_extensions\ExtensionUpdateStage: ~
+  Drupal\automatic_updates_extensions\Validator\UpdateReleaseValidator:
+    tags:
+      - { name: event_subscriber }
+  Drupal\automatic_updates_extensions\Validator\ForbidCoreChangesValidator:
+    tags:
+      - { name: event_subscriber }
+  Drupal\automatic_updates_extensions\Validator\RequestedUpdateValidator:
+    tags:
+      - { name: event_subscriber }