As of Shopify CLI 3.89, you now have more control over the types of extension and configuration updates that should be allowed in your automated app releases. This allows developers to be more confident in the safety of CI/CD pipelines and other app deployment automation.
This is a companion discussion topic for the original entry at https://shopify.dev/changelog/more-control-over-app-deploys-in-cicd-pipelines