Questions regarding dnf-automatic and minor version updates

[right.mint]

I’m setting up automatic updates for a RL server. I’d like to get only security upgrades (if reasonably possible; otherwise only minor updates should be fine).

Now, there’s the possibility of using dnf-automatic with upgrade_type = security. My main question is: Does the security repository include updates from later dot releases? E.g. if I set up dnf-automatic with upgrade_type = security on a 9.6 system now, will this keep getting security updates from 9.7 and later?

[label]

@right.mint

if I set up dnf-automatic with upgrade_type = security on a 9.6 system now, will this keep getting security updates from 9.7 and later?

No it wouldn’t. Assuming the errata in the repositories are correct and accurate, updates will come in that rely on other updated packages which will lead to your system updating to 9.7.

As an aside, it is never recommended to cherry pick updates, especially between point releases.