Hi, when preparing a stable-update, it's good to avoid conffile updates, as those prompt the user, and also prevent those packages from being updated by unattended-upgrades. In my specific case it was a dnsmasq update from 2.89 to 2.90 which also had a one character typo fix in /etc/dnsmasq.conf. (See https://bugs.debian.org/1093274) piuparts could detect that the package being tested is a stable update, and then warn when the conffile has changed between stable and that package. Greets, Lee