

Automatic daily updates for system packages. Automatic daily container updates with watchtower. I normally have things pinned to a reasonable major or minor release, so I do manual upgrades for new OS release branches and usually pin to a major version for Docker containers but depends on the container.



Surely Google has the resources to fix the bugs themselves. Most FOSS projects probably appreciate code contributions more than money.