does osquery ever do a bug fix release by cherry picking a single commit or PR on top of the previous release