Pkcon asking for authentication AFTER updating packages?

The behavior I’m used to when running pkcon update is that it looks for updates, lists any that are available and then asks me if I do want to update. If I confirm I then get a dialog asking for my password.

Today this happened

Getting updates                         [=========================]         
Finished                                [=========================]         
Loading cache                           [=========================]         
Testing changes                         [=========================]         
Finished                                [=========================]         
Updating packages                       [=========================]         
Waiting for authentication              [       ==                                           ]

with the dialog popping up asking for my password without a list of packages given. Did the default behavior change to eliminate the need for manual confirmation or what is going on here?
I would like to know exactly what I’m authorizing before giving my password. “Authentication is required to update software” is not sufficient if I haven’t been given a list of that software previously.

Operating System: KDE neon 6.2
KDE Plasma Version: 6.2.3
KDE Frameworks Version: 6.8.0
Qt Version: 6.8.0
Kernel Version: 6.8.0-48-generic (64-bit)

Use apt directly if you want to see everything. Pkcon hides useful content when it runs apt, so sometimes it is beneficial to use it directly if you prefer to use pkcon.

sudo apt update
sudo apt full-upgrade

Pkcon doesn’t need authentication to check for updates, only when installing them, just like it works in Discover. Your terminal output seems to indicate this.

I can’t say why pkcon isn’t showing what it is updating, though. I tested it here and I saw all the updates listed.

$ pkcon update
Getting updates                         [=========================]         
Finished                                [=========================]         
Testing changes                         [=========================]         
Finished                                [                         ] (0%)  
The following packages have to be installed:
 gdal-data-3.8.4+dfsg-3ubuntu3.all      Geospatial Data Abstraction Library - Data files
 gdal-plugins-3.8.4+dfsg-3ubuntu3.amd64 Geospatial Data Abstraction Library - Plugins
 libaec0-1.1.2-1build1.amd64    Adaptive Entropy Coding library
 libarmadillo12-1:12.6.7+dfsg-1build2.amd64     streamlined C++ linear algebra library
 libarpack2t64-3.9.1-1.1build2.amd64    Fortran77 subroutines to solve large scale eigenvalue problems
 libbabl-0.1-0-1:0.1.108-1.amd64        Dynamic, any to any, pixel format conversion library
 libblosc1-1.21.5+ds-1build1.amd64      high performance meta-compressor optimized for binary data
 libcharls2-2.4.2-2build2.amd64 Implementation of the JPEG-LS standard
 libfreexl1-2.0.0-1build2.amd64 library for direct reading of Microsoft Excel spreadsheets
 libfyba0t64-4.1.1-11build1.amd64       FYBA library to read and write Norwegian geodata standard format SOSI
 libgdal34t64-3.8.4+dfsg-3ubuntu3.amd64 Geospatial Data Abstraction Library
 libgdcm3.0t64-3.0.22-2.1ubuntu1.amd64  Grassroots DICOM runtime libraries
 libgeos-c1t64-3.12.1-3build1.amd64     Geometry engine for Geographic Information Systems - C Library
 libgeos3.12.1t64-3.12.1-3build1.amd64  Geometry engine for Geographic Information Systems - C++ Library
 libgeotiff5-1.7.1-5build1.amd64        GeoTIFF (geografic enabled TIFF) library -- run-time files
 libhdf4-0-alt-4.2.16-4build1.amd64     Hierarchical Data Format library (without NetCDF)
 libhdf5-103-1t64-1.10.10+repack-3.1ubuntu4.amd64       HDF5 C runtime files - serial version
 libhdf5-hl-100t64-1.10.10+repack-3.1ubuntu4.amd64      HDF5 High Level runtime files - serial version
 libkmlbase1t64-1.3.0-12build1.amd64    Library to manipulate KML 2.2 OGC standard files - libkmlbase
 libkmldom1t64-1.3.0-12build1.amd64     Library to manipulate KML 2.2 OGC standard files - libkmldom
 libkmlengine1t64-1.3.0-12build1.amd64  Library to manipulate KML 2.2 OGC standard files - libkmlengine
 liblept5-1.82.0-3build4.amd64  image processing library
 libnetcdf19t64-1:4.9.2-5ubuntu4.amd64  Interface for scientific data access to large binary data
 libodbcinst2-2.3.12-1ubuntu0.24.04.1.amd64     Support library for accessing ODBC configuration files
 libogdi4.1-4.1.1+ds-3build1.amd64      Open Geographic Datastore Interface Library -- library
 libopencv-calib3d406t64-4.6.0+dfsg-13.1ubuntu1.amd64   computer vision Camera Calibration library
 libopencv-contrib406t64-4.6.0+dfsg-13.1ubuntu1.amd64   computer vision contrlib library
 libopencv-dnn406t64-4.6.0+dfsg-13.1ubuntu1.amd64       computer vision Deep neural network module
 libopencv-features2d406t64-4.6.0+dfsg-13.1ubuntu1.amd64        computer vision Feature Detection and Descriptor Extraction library
 libopencv-flann406t64-4.6.0+dfsg-13.1ubuntu1.amd64     computer vision Clustering and Search in Multi-Dimensional spaces library
 libopencv-highgui406t64-4.6.0+dfsg-13.1ubuntu1.amd64   computer vision High-level GUI and Media I/O library
 libopencv-imgcodecs406t64-4.6.0+dfsg-13.1ubuntu1.amd64 computer vision Image Codecs library
 libopencv-ml406t64-4.6.0+dfsg-13.1ubuntu1.amd64        computer vision Machine Learning library
 libopencv-objdetect406t64-4.6.0+dfsg-13.1ubuntu1.amd64 computer vision Object Detection library
 libopencv-video406t64-4.6.0+dfsg-13.1ubuntu1.amd64     computer vision Video analysis library
 libopenshot26-0.3.3+dfsg2+1190+202406251505+daily~ubuntu24.04.1.amd64  library for high quality video editing
 libproj25-9.4.0-1build2.amd64  Cartographic projection library
 libprotobuf32t64-3.21.12-8.2build1.amd64       protocol buffers C++ library
 libqhull-r8.0-2020.2-6build1.amd64     calculate convex hulls and related structures (reentrant shared library)
 libqt5webengine-data-5.15.16+dfsg-5+24.04+noble+release+build4.all     Web content engine library for Qt - Data
 libqt5webengine5-5.15.16+dfsg-5+24.04+noble+release+build4.amd64       Web content engine library for Qt
 libqt5webenginecore5-5.15.16+dfsg-5+24.04+noble+release+build4.amd64   Web content engine library for Qt - Core
 libqt5webenginewidgets5-5.15.16+dfsg-5+24.04+noble+release+build4.amd64        Web content engine library for Qt - Widget
 librttopo1-1.1.0-3build2.amd64 Tuscany Region topology library
 libsocket++1-1.12.13+git20131030.5d039ba-1build1.amd64 lightweight convenience library to handle low level BSD sockets in C++ - libs
 libspatialite8t64-5.1.0-3build1.amd64  Geospatial extension for SQLite - libraries
 libsuperlu6-6.0.1+dfsg1-1build1.amd64  Direct solution of large, sparse systems of linear equations
 libsz2-1.1.2-1build1.amd64     Adaptive Entropy Coding library - SZIP
 libtesseract5-5.3.4-1build5.amd64      Tesseract OCR library
 liburiparser1-0.9.7+dfsg-2build1.amd64 URI parsing library compliant with RFC 3986
 libxerces-c3.2t64-3.2.4+debian-1.2ubuntu2.amd64        validating XML parser library for C++
 proj-bin-9.4.0-1build2.amd64   Cartographic projection library (tools)
 proj-data-9.4.0-1build2.all    Cartographic projection filter and library (datum package)
 python3-defusedxml-0.7.1-2.all XML bomb protection for Python stdlib modules (for Python 3)
 python3-pyqt5.qtopengl-5.15.11+dfsg-1+24.04+noble+release+build3.amd64 Python 3 bindings for Qt5's OpenGL module
 python3-pyqt5.qtwebchannel-5.15.11+dfsg-1+24.04+noble+release+build3.amd64     Python 3 bindings for Qt5's WebChannel module
 python3-pyqt5.qtwebengine-5.15.6-1+24.04+noble+release+build3.amd64    Python 3 bindings for Qt5's WebEngine module
 unixodbc-common-2.3.12-1ubuntu0.24.04.1.all    Common ODBC configuration files
The following packages have to be updated:
 openshot-qt-3.2.1+dfsg2+1693+202407112018~ubuntu24.04.1.all    OpenShot video editor
 python3-openshot-0.3.3+dfsg2+1190+202406251505+daily~ubuntu24.04.1.amd64       Python bindings for the OpenShot library
Proceed with changes? [N/y] 

I have an alias for updating that runs sudo apt full-upgrade before running pkcon update. Sometimes (like today) apt wants to hold back a few packages though (phased updates maybe?) and pkcon usually installs those. But it does normally list them first. That’s why I’m confused.

How about nala - I thought that looked nicer and more informative than apt when I tested a Kubuntu live session a while back.

Why? you are quite literally running the same command twice.

Yes, this is likely.

And usually it doesn’t even show these phased packages at all just like it doesn’t show packages held for other reasons (I think, it has been ages since I used it), it just installs them when they are available. Phasing is sort of random, and the pkcon session my not be phased, while the apt one is.

If you prefer to not have any updates phased, you can change that configuration if you want.

Nala is still a layer using apt under the skin.

Discover and Pkcon iirc simply don’t show the phased updates (iirc), if there are any for that user.

Nala, I can’t say. But it is still just a wrapper for apt.

My alias includes flatpaks and a few other things as well. As for apt and pkcon: pkcon is what is recommended for Neon last I checked, but unfortunately has the bad habit of freezing somewhere around 60-80% completion if there is a big number of updates. apt doesn’t have that problem. I only run pkcon as a safeguard, so no one tells me “well if you had used pkcon to update like you’re supposed to, package xyz would have been upgraded already and you wouldn’t be having this problem.”

I’d suggest doing your main repo first:

sudo nala update
sudo nala full-upgrade

Let us know how you like nala, it’s very pretty and nicer than apt.

Next up, have a go at running topgrade.

Topgrade will very thoroughly update everything on your system, but it’s always good to do the base upgrade first on it’s own.

apt
nala

Just ignore those people, tbh.
No neon dev is going to fault you for using apt.
Pkcon (and Discover) is nothing more than a wrapper calling whatever the distro’s native packaging tool is. On Debian and Ubuntu based systems, this will be apt.