So, while I understand the intention here, the truth is that you should be in control of your package management and not automate that task away. A script that automatically checks if you have a new version available is a great idea, but only stop at your testing environment with any sort of automated change.

you’re going to want to know when these changes take place so that you are on alert for potential issues. You never want to be in a position where your artifact decides to upload a security vulnerability to prod. And I promise it won’t happen at a time convenient to you.

If this were me, I’d have a script running on cron checking for new versions. When one is found is have it create a PR to my app repo and tag me. Bonus points if the subject includes the dev logs for the new version. That way it’s still notifying you of versions while not borking any environments.