The way we define dependencies and constraints for the Airflow docker image is too loose and ad-hoc. We should rely on a proper dependency manager/locker tool such as Poetry to lock the dependencies and export them as a requirements.txt file.
This will guarantee that any image rebuild will not silently update dependencies.