How to deal with waiting for the channel in production environments?

[wamserma]

@SynQ

My question remains: what would be the best way to deal with packages lagging in the build process that cannot wait because of security updates?

If there is a reason you can not wait for the channel to update and you know that the update of package XY will not break any downstream packages you rely on, you can
use system.replaceRuntimeDependencies as detailed here with a security-hotfix for OpenSSL: OpenSSL 3.0.7 update (2022-11-01) FAQ