Fish Shell, understanding versioning ports vs packages

Would someone be so kind as to explain how package "progression" works?
I am currently (happily) automating OpenBSD builds with sitesXX.tgz and autoinstall.

I am trying to add Fish shell to this. (rsync the packages locally so I can build off net)

I've seen in the package directory at the mirror site,    version 4.1.1 (september 2025)
/pub/OpenBSD/7.8/packages/amd64/
fish-4.1.1.tgz 

(On a Linux box I have, its 4.2.0.  And the current Fish release is 4.6.0)

In the CVS repository 
https://cvsweb.openbsd.org/log/ports/shells/fish/main/pkg/PLIST,v?sort=File
It shows:
    revision 1.9/ (Download) - annotate - Sun, 29 Mar 2026 11:33:29 UTC by volker
    Changes since 1.8: +1 -0 (diff)

    shells/fish/main: Update to 4.6.0

    From Maintainer Florian Viehweger, thanks


So my "guess" is that this is the "ports" version?

Questions:
--------------------------------------------------------------------------How does an application get "promoted" to a new version in packages?
If I want to run the latest 4.6.0, is it "safe" to use the version in ports? 
    (assume I can just run make in the ports directory for it?)
Are all packages in the mirror held at the original version from that release date?
    And its up to me the user to update with ports before the next OpenBSD release if I wish?

Thanks, sorry for the questions. Just eager to learn more on this topic.