Embedded notwithstanding (I admit that’s a special case where most norms go out the window), you could put the tooling and configs into Ansible plays and run th

Embedded notwithstanding (I admit that’s a special case where most norms go out the window), you could put the tooling and configs into Ansible plays and run them with the upgrades, or use Puppet to push them continuously. Regarding distro maintainers, specifically Debian, ripgrep is in Bookworm [0]. [0]: https://packages.debian.org/bookworm/ripgrep https://packages.debian.org/bookworm/ripgrep