My colleague Andrey Falko recently published a post on the Salesforce engineering blog about a tool we built and open sourced called Dockerfile Image Update. It’s a pretty nice way of pushing pull requests to child Docker images when a parent image has changed while avoiding using the latest tag by plugging it into your CI/CD flow. Check it out!