Publish the plugin update and mark it as hidden to prevent public release after approval.
Hidden release