I've never heard of patching containers. Our build pipelines rebuild container images for every deployment. All you need to upgrade some dependency is to set a

I've never heard of patching containers. Our build pipelines rebuild container images for every deployment. All you need to upgrade some dependency is to set a version number in the Dockerfile. There's no "too" because that's the only place we deal with that kind of version dependency. (Not counting dependencies internal to a service, like libraries.)