What version stability guarantees does Alpine provide (if any)?

Question

I was surprised to see that Alpine upgraded the CVS package recently as part of a "security patch" from CVS version 1.11.23 to 1.12.12, even in the old "stabl