The --dry-run flag simulates the whole upgrade pass and prints what would be installed without changing anything — the safe way to test new Allowed-Origins entries before trusting them to run unattended. Nothing is downloaded and nothing is modified. Run this after editing 50unattended-upgrades.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.