So this is about automatically putting on security patches but not using cockpit.
When I use dnf-automatic, its says no security patches are needed:
Last metadata expiration check: 3:44:48 ago on Fri 05 Nov 2021 09:54:45 GMT.
No security updates needed, but 67 updates available
But when I use dnf --security check-update there are a whole stack of security patches lined up.
dnf --security check-update
Last metadata expiration check: 3:45:39 ago on Fri 05 Nov 2021 09:54:45 GMT.
NetworkManager.x86_64 1:1.30.0-13.el8_4 baseos
This has only just started working on Rocky this week but I have no idea why. I wonder if it rings any bells here.