OS Patching concerns

Want to run OS patches on our foreman master and proxies however this will bring in a number of rubygem, python and katello package updates if I leave the katello, pulpcore and puppet repos enabled. Worried it might conflict with foreman setup. Repos have been left in place since installation

Foreman and Proxy versions:
3.6, 4.8

should i disable above repos and only have EL8 repos enabled or will the above be safe to do?