# Pin the OnyxPlay origin above the Debian archive for our own packages.
#
# Priority 1001 is chosen deliberately over the more usual 990: above 1000, apt
# keeps a LOWER version as the candidate. After deb-host's `rollback-stable.sh`
# switches trixie-stable to an older snapshot, a plain `apt-get upgrade` on a
# node therefore moves it down (it asks Y/n; -y needs --allow-downgrades). An
# explicit `apt-get install packager-node=<older>` works with or without this
# pin (registry v3.72). It does not downgrade by itself: unattended-upgrades never
# downgrades (Allow-downgrade is unset, registry §7.16), so rollback is per node.
#
# `o=OnyxPlay` must match the -origin/-label the aptly publish sets and the
# Origins-Pattern in 52onyxplay-unattended. All three are one string; changing it
# in one place only stops updates arriving with no error anywhere.
Package: packager-node
Pin: release o=OnyxPlay
Pin-Priority: 1001
