Prevent update from

My customer have a request that the Oracle Linux server be patched but not beyond 7.6

I notice that by default ol7_latest is in the active repolist on a new install. My understanding is that this will cause it to automatically upgrade all the way to 7.9.

The perplexing thing is I swear I used to have to manually enable ol7_latest, eg following steps like those in this document:

But with the repository enabled by default how do I update it while preventing it from automatically advancing to the next release?

The reason for this is that it is difficult to get the vendor to agree on a supported version of Linux.