Jira doesn't track any changes made to apps on its own Audit Log. Administrators need to use the UPM audit log to track these changes, however, Jira should have these centralized in one place.

The UPM audit log system is a legacy system that's not being actively developed and doesn't have the functionality that Jira Advanced Audit Log provides such as Exports and REST API, thus leading admins to create workarounds to see when plugins have been updated, installed and so on, as that's crucial in large environments.