dnf5-security-updates-knowledge-patch

# DNF5 Security Updates Knowledge Patch Baseline: DNF5 through 5.1.x and Fedora 40-era behavior. Covered range: subsequent DNF5, Fedora 41+, Fedora 43, and RHEL 10 behavior through 2026.04.07. ## Use the references Load the reference matching the task before changing package-management code, commands, configuration, or automation. Preserve distribution scope: upstream DNF5, Fedora, Rocky Linux, and RHEL can ship different command forms, packages, defaults, and systemd units. | Reference | Topics | | --- | --- | | [security-and-automatic-updates.md](references/security-and-automatic-updates.md) | Advisory scopes and schemas, strict filters, minimal fixes, automatic configuration, emitters, timers | | [transactions-upgrades-and-history.md](references/transactions-upgrades-and-history.md) | Check/upgrade behavior, stored and offline transactions, history/replay, system upgrades, restart detection | | [repositories-packages-and-queries.md](references/repositories-packages-and-queries.md) | Repository provenance and creation, downloads, comps, package reasons, repoquery, versionlock | | [configuration-policies-and-plugins.md](references/configuration-policies-and-plugins.md) | Precedence, variables, metadata/cache, solver controls, signatures, locks, plugins, vendor policy | | [automation-apis-and-ansible.md](references/automation-apis-and-ansible.md) | JSON and exit contracts, D-Bus daemon, libdnf5 API changes, native plugins, Ansible | | [migration-and-platform-notes.md](ref...