in the past I have made the mistake of using APT/YUM repos directly, and felt the pain myself, so agree with @groob, avoid that if possible. Either pin the version directly (for the APT, pin it to

3.3.2

until

4.0.2

is out) or just grab the published packages: https://osquery-packages.s3.amazonaws.com/deb/osquery_4.0.2_1.linux.amd64.deb for example