diff --git a/bash/deb-update.bash b/bash/deb-update.bash
index 19ed9cb..a6db3af 100755
--- a/bash/deb-update.bash
+++ b/bash/deb-update.bash
@@ -27,6 +27,9 @@ if hash dnf 2>/dev/null; then
 
     # If arguments like -y are passed to the script, they become "$@"
     dnf "$@" upgrade
+
+    # potentially unsafe
+    dnf "$@" autoremove
 fi
 
 if hash rpmconf 2>/dev/null; then