Yes auto-upgrade works after adding my repo to roots .gitignore [safe] folder.
I’m still having trouble getting the --commit-lock-file flag to work. With the flag, the update service just hangs indefinitely (no CPU utilisation). Maybe it’s waiting for interactive writing of committ message or something. I’ll try the two-step approach suggested by waffle.