@bongoozy it is probably best for you to setup a meeting with your Customer Success Manager to discuss options that would work best for your environment. You have essentially 3 options:
1. Deploy Netskope client with upgrade option turned off - in that case it will never upgrade and you have to move to the new version via SCCM or equivalent.
2. Perform auto-upgrade of the client to the latest release automatically
3. Perform automatic upgrade to a certain golden version that you certify, or turn off automatic upgrades to any version as a rule and and turn it on temporarily to upgrade clients to latest or certified golden version as needed.