Hi, +1 to Birger's question. I just upgraded to buster (unattended-upgrades 1.11.2) and this bug surprised me as well. In the meantime, I patched locally with this:
grep -q 'if not pkg.candidate' /usr/bin/unattended-upgrade || sed -i 's/ for dep in pkg.candidate.dependencies:/ if not pkg.candidate: return acc\n\0/' /usr/bin/unattended-upgrade Thanks!
