Drupal: Update core if security update

gistfile1.txt

#Put site in maintenance mode
drush vset maintenance_mode 1

#Enable updates
drush en update -y

#run cron
drush cron

#refresh update status
drush rf

#Lists security updates
drush vset update_check_disabled 0 -y && drush -n -p up --security-only

#clear cache before backup
drush cc all

#If code is version controlled, backup db is enough
drush sql-dump --result-file=../before-security-update.sql --gzip

#If not, make full backup (code + db)
drush ard

#Now update core
drush up drupal

#Disable updates if you want
drush dis update -y

#Put site back out of maintenance
drush vset maintenance_mode 0


#Add changed files to version control
git add CHANGELOG.txt
git add themes
git add modules
git add profiles
git add includes