I am using Endpoint Security Cloud Plus and seen the same when upgrading from 11.3 to 11.4 and 11.4 to 11.5. The client only got updated when I did it manually. I don’t see any configuration option to control this behaviour. I assumed after the workspace got upgraded the client would get automatically updated rather than having to install it manually.