It seems mkupdate-with-scores runs sa-update/lint tests for multiple versions, currently 3.4.1 - 3.4.4. But it proceeds even if only one of them succeeds. It would seem more appropriate to require all of them passing to publish rules. Also trunk should be added for testing.

The current code can be found near the end of mkupdate-with-scores and is pretty self explaining.

...
# test to make sure it works with sa-update --install
TESTED_VERSIONS=""

MAJOR_VERS=3
for (( MINOR_VERS=4; 1; MINOR_VERS++ )); do
  for (( UPDATE_VERS=1; 1; UPDATE_VERS++ )); do
...
# publish update
if [[ ! -z "$TESTED_VERSIONS" ]]; then
...