Currently, all shellbox service instances are running 2025-01-07-141744 with the exception of shellbox-media, which is running the newer 2025-03-04-121606 image version. That was done in order to pick up a new PHP 8.1 base image that appropriately sets display_startup_errors (see T377038#10598675).
Between these versions, there are a couple of low-risk dependency updates, and one notable code change: https://gerrit.wikimedia.org/r/1117968 which switches the call action - i.e., relevant to shellbox-constraints - from call_user_func_array to dynamic function call.
In addition, the newer PHP 8.1 base image also picks up the upgrade from PCRE2 10.26 to 10.42 (T386006), which is again primarily relevant to shellbox-constraints. While shellbox server does use PCRE functions, they're fairly straightforward use cases that are unlikely to change behavior across PCRE2 versions, in contrast to arbitrary user-supplied functions in the constraints case.
In any case, we should converge shellbox service instances toward the newer image version, potentially with some additional diligence for shellbox-constraints.
@Lucas_Werkmeister_WMDE - Would you happen to have any concerns / thoughts on the shellbox-constraints aspect based on the above?