The August security update bulletin has been released . It contains two separate stages designed to speed up delivery of the updates. The first is 01 August patch level, the second 05 August. It means either we'll have to wait a bit and get both at once, or will receive two security updates, hopefully soon, and hopefully in August.
So even if you do receive the August update, unless it's says 05 August security level you have not received the latest. Thought I'd mention it seeing as it's different to previous months. The first update is all Android side so should be quick, the second one includes Qualcomm updates and should be, in theory, the only one that requires additional testing. I believe this is why they're separated.
The update details are released a month beforehand to manufacturers, so Nokia have already have had a month to get this update ready for the devices.
If testing is the cause for the delay they should have a beta programme where the update is available immediately and associated single thread to post issues. If any issues are resolved or changes made the participants could get a simple small update on update release.