arch containers (or rather arch in general) regularly requires you to update the keyring and if that is out of date at the right time or a key expires, your update will fail and its why topgrade is configured to not treat distrobox container updates as vital, so if they fail, they are ignored