There must be a more automated way of update these images. Dependabot would be nice, but something semi-manual (but tracked) is acceptable as well, if dependabot turns out to be difficult.
- All images updated
- Acceptance tests pass (files are where expected)
- We have a documented procedure to do the next update