> I think relying on unreleased software is fine when that is known to fix > security issues. In other cases, we should stick to upstream releases > IMO: it’s upstream’s job to decide when a commit can be considered a > release.
It's the 3.22.2 branch so it contains only backported bugfixes. Arch linux does the same...
