[moondev]

> Best I can tell, none of the versions are pinned.

From your link, everything is pinned? So a theoretical exploit in a future release of package is not going to exist in this immutable release https://github.com/ublue-os/bazzite/releases/tag/42.20250417

[kayson]

Right but everytime a new immutable release is created, it automatically pulls the latest version of every package. It's not a manual change of package versions.

[XorNot]

I mean that's the big lie isn't it? We all know no one is actually looking at these.

Every system which tells me how immutable it is then shows me it's automatic version bump script or something.

[Kudos]

The current term being used is "atomic" for this reason.