Unfortunately you have to check for updates yourself. I'd like to see this fixed this year, it's absurd our extension process still requires so much manual labor.
That would be great. It's something Drupal does particularly well - it checks all the contributed modules for update status automatically, and there are regular email alerts that flag any module with a security issue - makes code maintenance a lot easier.
Paul