That's because gpsguard is in extras-devel too. I have seen this effect with other packages when they are present in more than one repository, it seems the package manager shows the same package again as update when it appears in a higher priority repository.