Google recently updated its Android Security Bulletin overview page to confirm that security fixes will now be merged to AOSP on a quarterly, rather than monthly, basis.

I recently reported that Google shifted to a 'risk-based update process' for security updates, and this is part of that change.

🔗 Exclusive: Google wants to make Android phones safer by switching to ‘risk-based’ security updates