Yes, the source is LVFS, which is where fwupd pulls packages. Here's an example of a system firmware package for that machine: https://fwupd.org/lvfs/devices

Yes, the source is LVFS, which is where fwupd pulls packages. Here's an example of a system firmware package for that machine: https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadN3ATR.firmware https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadN3ATR.firm... There are other devices within the machine which also receive firmware updates, like the NVME drive and the Thunderbolt controller and so forth. It is absolutely trivial to find this information, to the point if you're running any fully-functional GNOME or KDE deployment the software update tools (GNOME Software, KDE Discover) will in fact prompt you to update when something is available.