The client installs and checks advisories, but doesn't tell administrators when installed plugins have newer verified releases.
Design intent (D12): compare each installed plugin's $plugin->version integer against the registry's recorded moodle-version per release — the identifier Moodle itself trusts (release strings drift). Surface via the existing scheduled task + admin notification, respecting the privacy posture: the comparison runs locally against the full downloaded metadata, never by sending the site's plugin inventory anywhere (same pattern as advisory matching, RFC §4.6).
The client installs and checks advisories, but doesn't tell administrators when installed plugins have newer verified releases.
Design intent (D12): compare each installed plugin's
$plugin->versioninteger against the registry's recordedmoodle-versionper release — the identifier Moodle itself trusts (release strings drift). Surface via the existing scheduled task + admin notification, respecting the privacy posture: the comparison runs locally against the full downloaded metadata, never by sending the site's plugin inventory anywhere (same pattern as advisory matching, RFC §4.6).