All available server updates were applied. Many had only an old kernel removal. I rebooted all but two dev servers (which had no changes at all), because an old kernel package removal triggers a boot loader reconfig even though the old kernel isn’t being used.