Created attachment 120742 [details] Screenshot of erronious updates SUMMARY Whenever I enable the Flathub repository, Discover eventually presents me with Flathub "updates" to applications that were never installed as Flatpaks. The most common two that have shown up are 1) Freedesktop Platform & 2) KDE Application Platform. STEPS TO REPRODUCE 1. Enable Flathub 2. Wait for Freedesktop Platform or KDE Application Platform to be updated on Flathub 3. Your distribution has not yet updated the application in the official repositories OBSERVED RESULT Discover will present updates from Flathub for non-Flatpak based applications when checking for updates in Discover EXPECTED RESULT Discover will not present an available update and will wait until the update is provided from the repository the application was originally installed from to prevent breakage and compatibility issues. SOFTWARE/OS VERSIONS Linux/KDE Plasma: Fedora 30 KDE Spin KDE Plasma Version: 5.15.5 KDE Frameworks Version: 5.58.0 Qt Version: 5.12.1 Kernel Version: 5.1.6-300.fc30.x86_64 ADDITIONAL INFORMATION The Software Update tray table icon/app has NEVER presented these erroneous updates only Discover has done this. The only software that has been installed through Flathub are Steam, Handbrake and MakeMKV. This issue also occurred when Fedora 29 first launched. I inadvertently installed these updates at the time not realizing the potential problems they could cause. When I rebooted, I found that I could no longer log in to my OS (I was able to enter my user name an password but not submit them). This just highlights why it is critical to not present Flathub updates for non-Flatpak software and why the original installation repository should be the only repository an application's updates should be acquired from. Applications installed from one repository should not have their updates hijacked by another repository!
Created attachment 120743 [details] Screenshot showing the Freedesktop Platform's update source to be Flathub instead of Fedora.
Created attachment 120744 [details] Screenshot showing the KDE Application Platform's update source to be Flathub instead of Fedora.
What you're seeing is a bit of an implementation detail of how Flatpak apps work. Each flatpak app links against one or more "runtimes": there's the KDE runtime, the GNOME runtime, the FreeDesktop runtime, etc. These runtimes are provided by your Flatpak source--in this case, from Flathub. They don't come from Fedora. Installing a Flatpak app that requires any of these runtimes will automatically cause them to be installed, just like how installing an app that comes from Fedora will automatically install its Fedora-provided dependencies. Basically, think of these as package dependency updates for your flatpak app(s).