Currently, running bin/logstash-plugin update will update plugins to the latest version possible, regardless of whether a major version has changed in the plugin.
This may cause issues, and cause the plugin manager to install a version of the plugin which is incompatible with the associated version of Logstash.
The default behavior for plugin updates should be to attempt to install the latest version in the same minor rather than the absolute latest version, but allow that update to be made if required.