Lets try to resolve our update backlog. Current plan is that each change should result in a newly deployed image if it touches production code. If it is only a test dependency this is not needed.

The developer should check the tests pass, read the release notes and if anything looks "suspicious" test it manually (locally for example). If it does cause a regression a test should be added, the regression resolved and then it should be deployed.