Morning Nathan,

apt wasn't offering the python2-minimal patch:

# apt list --upgradable
Listing... Done
google-chrome-stable/stable 129.0.6668.89-1 amd64 [upgradable from: 128.0.6613.113-1]
krb5-locales/devclient-focal-staging-updates,devclient-focal-staging-updates 1.17-6ubuntu4.7 all [upgradable from: 1.17-6ubuntu4.6]
libgssapi-krb5-2/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libk5crypto3/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libkrb5-3/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libkrb5support0/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libnss-systemd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
libpam-systemd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
libpcap0.8/devclient-focal-staging-updates 1.9.1-3ubuntu1.20.04.1 amd64 [upgradable from: 1.9.1-3]
libpython3.12-minimal/focal 3.12.7-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
libpython3.12-stdlib/focal 3.12.7-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
libsystemd0/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
libudev1/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
microsoft-edge-stable/stable 129.0.2792.65-1 amd64 [upgradable from: 128.0.2739.54-1]
nautilus-share/devclient-focal-staging-updates,devclient-focal-staging-security 0.7.3-2ubuntu3.1 amd64 [upgradable from: 0.7.3-2ubuntu3]
python-pip-whl/devclient-focal-staging-apps-security,devclient-focal-staging-apps-security 20.0.2-5ubuntu1.10+esm2 all [upgradable from: 20.0.2-5ubuntu1.10]
python3-pip/devclient-focal-staging-apps-security,devclient-focal-staging-apps-security 20.0.2-5ubuntu1.10+esm2 all [upgradable from: 20.0.2-5ubuntu1.10]
python3-update-manager/focal,focal 4:20.67 all [upgradable from: 4:20.66]
python3.12-minimal/focal 3.12.7-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
python3.12-venv/focal 3.12.7-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
python3.12/focal 3.12.7-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
shim-signed/devclient-focal-staging-updates 1.40.10+15.8-0ubuntu1 amd64 [upgradable from: 1.40.9+15.7-0ubuntu1]
systemd-sysv/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
systemd-timesyncd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
systemd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
terraform/focal 1.9.6-1 amd64 [upgradable from: 1.8.5-1]
ubuntu-advantage-tools/devclient-focal-staging-updates,devclient-focal-staging-updates 34~20.04 all [upgradable from: 32.3.1~20.04]
ubuntu-pro-client-l10n/devclient-focal-staging-updates 34~20.04 amd64 [upgradable from: 33.2~20.04]
ubuntu-pro-client/devclient-focal-staging-updates 34~20.04 amd64 [upgradable from: 33.2~20.04]
udev/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
update-manager-core/focal,focal 4:20.67 all [upgradable from: 4:20.66]
update-manager/focal,focal 4:20.67 all [upgradable from: 4:20.66]
vault-enterprise/focal 1.17.6+ent-1 amd64 [upgradable from: 1.16.6+ent-1]

/etc/apt/apt.conf.d/20apt-esm-hook.conf looks pretty standard, but it's not offering upstream ESM channels/patches.

I'll wait for 4.20.68 to build and then give that a go. Thanks