Agree. I think it's better to explicitly update major versions and know to keep an eye on the deployment in case it's something that tests can't cover. I had a

Agree. I think it's better to explicitly update major versions and know to keep an eye on the deployment in case it's something that tests can't cover. I had a CloudBuild fail to deploy due to a bug in one of the builders :latest. Ironically the bug was due to a change in error logging, so it failed silently. So it's not just docker or dependencies. In this case I could've used a GCP notify that the builder failed.