obs://build.opensuse.org/mozilla

YaST Software Management (in the tab called “Versions”) is saying that Mozilla Thunderbird 78.8.1 is available from vendor obs://build.opensuse.org/mozilla.
But I do not have such vendor listed in YaST Software Repositories…
Where does the package come from, then??

Please show

zypper lr -d

Yes, I am seeing that. But it actually says:

78.8.1-lp152.1.1-x86_64 from mozilla with priority 100 and vendor obs://build.opensuse.org/mozilla

Note that it names the repo. In this case the repo is “mozilla” (that’s what I used for the name when I configured that repo). And it has priority 100 – that worse than the default 99 priority, because I don’t want to accidentally install from there. Yes, I set that 100 here, probably using Yast Software Repositories.

I normally keep that repo disabled, but then it won’t show up in the Versions tab. I’m not actually using anything from that repo, but I configured in case I need that option.

You probably have the same repo configured. And if you look closely at that line in the Versions tab, it will tell you the name (or alias) that you are using for that repo.

Here we go:

**#** zypper lr -d 
#  | Alias                           | Name                               | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                      | Service 
---+---------------------------------+------------------------------------+---------+-----------+---------+----------+--------+--------------------------------------------------------------------------+-------- 
 1 | Mozilla                         | Mozilla                            | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.2/    |  
 2 | NVIDIA                          | NVIDIA                             | No      | ----      | ----    |   99     | rpm-md | https://download.nvidia.com/opensuse/leap/15.2                           |  
 3 | Packman                         | Packman                            | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Leap_15.2/       |  
 4 | download.nvidia.com-$releasever | nVidia Graphics Drivers            | No      | ----      | ----    |   99     | rpm-md | https://download.nvidia.com/opensuse/leap/15.2                           |  
 5 | dvd                             | dvd                                | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://opensuse-guide.org/repo/openSUSE_Leap_15.2/                       |  
 6 | libdvdcss                       | libdvdcss                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://opensuse-guide.org/repo/openSUSE_Leap_15.2/                       |  
 7 | openSUSE_Leap_15.2              | Packman Alternative Mirror         | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://ftp.fau.de/packman/suse/openSUSE_Leap_15.2/                       |  
 8 | oss                             | Main Update Repository Alternative | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://mirror.umd.edu/opensuse/update/leap/15.2/oss/                     |  
 9 | repo-debug                      | Debug Repository                   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.2/repo/oss/      |  
10 | repo-debug-non-oss              | Debug Repository (Non-OSS)         | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.2/repo/non-oss/  |  
11 | repo-debug-update               | Update Repository (Debug)          | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.2/oss/                 |  
12 | repo-debug-update-non-oss       | Update Repository (Debug, Non-OSS) | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.2/non-oss/             |  
13 | repo-non-oss                    | Non-OSS Repository                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.2/repo/non-oss/        |  
14 | repo-oss                        | Main Repository                    | No      | ----      | ----    |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.2/repo/oss/            |  
15 | repo-source                     | Source Repository                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/distribution/leap/15.2/repo/oss/     |  
16 | repo-source-non-oss             | Source Repository (Non-OSS)        | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/distribution/leap/15.2/repo/non-oss/ |  
17 | repo-update                     | Main Update Repository             | No      | ----      | ----    |   99     | rpm-md | http://download.opensuse.org/update/leap/15.2/oss/                       |  
18 | repo-update-non-oss             | Update Repository (Non-Oss)        | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.2/non-oss/                   | 

Then that will be the first repo in your list (the “Mozilla” repo).

So you are saying that it is better to disable the Mozilla repo, correct?
I am assuming that updates for Firefox and Thunderbird will come from one of the other repos. Am I right?

If you have not installed anything from the “Mozilla” repo, then it is best to disable. You can occasionally enable to look around, but then disable again.

If you have not done anything to change it, then normal “firefox” and “thunderbird” update should come from the main update repo.

You get the update from the Repo, the package is installed from.

Mozilla from mozilla Repo get a new version from mozilla Repo.
Mozilla from OSS/Update-OSS Repo get the new version from OSS-Update Repo

Thats why you get the Info (and yes its only an Info):

The following 32 package updates will NOT be installed:
  AusweisApp2 broadcom-wl-kmp-default-6.30.223.271_k5.11.5_1.g84a32d6-129.79 curl
  ffmpeg-4-libavcodec-devel ffmpeg-4-libavformat-devel ffmpeg-4-libavresample-devel
  ffmpeg-4-libavutil-devel ffmpeg-4-libpostproc-devel ffmpeg-4-libswresample-devel
  ffmpeg-4-libswscale-devel libcurl4 libcurl-devel libfdk-aac2 libKF5AkonadiCore5 libsensors4
  libsensors4-devel libsox3 openSUSE-e-X-Icons perl-Glib-Object-Introspection perl-Gtk3 perl-JSON-MaybeXS
  perl-Net-DBus-GLib perl-Number-Bytes-Human r8168-kmp-default-8.048.03_k5.11.5_1.g84a32d6-76.35 sensors
  sox sox-devel ucode-intel virtualbox virtualbox-kmp-default-6.1.18_k5.11.5_1.g84a32d6-587.1
  virtualbox-qt wxWidgets-lang

That means f.e.:
AusweisApp2 is in a higher Version-Release in another Repo than the one that is installed:

LANG=C zypper se -s AusweisApp2
Loading repository data...
Reading installed packages...

S  | Name        | Type       | Version            | Arch   | Repository
---+-------------+------------+--------------------+--------+-----------
i+ | AusweisApp2 | package    | 1.22.0-lp152.1.1   | x86_64 | Sauerland
v  | AusweisApp2 | package    | 1.22.0-lp152.2.6.1 | x86_64 | OSS-Update
v  | AusweisApp2 | package    | 1.20.2-lp152.2.3.1 | x86_64 | OSS-Update
v  | AusweisApp2 | package    | 1.20.0-lp152.1.6   | x86_64 | OSS
   | AusweisApp2 | srcpackage | 1.22.0-lp152.1.1   | noarch | Sauerland
   | AusweisApp2 | srcpackage | 1.22.0-lp152.2.6.1 | noarch | OSS-Update
   | AusweisApp2 | srcpackage | 1.20.2-lp152.2.3.1 | noarch | OSS-Update

I have installed it from Repo Sauerland in Version-Release 1.22.0-lp152.1.1, but its also installeble from Oss-Update Repo in higher Version-Release 1.22.0-lp152.2.6.1.
Sources are the same: 1.22.0
Release (often only a new rebuild on Opensuse Build Service): 1.1 vs 6.1
6.1 is a higher number and therefore I get the above report.

So its on the User to decide to switch but I do not want to switch the above packages and its not necessary for running the package.

I hope you now you saw your repository listing, that you now understand where it comes from?
In other words that YaST Software Management is correct?