It would be really nice to have Docker tags that represent the major version lines (e.g. 10.8, 10.9 in the way Jellyfin does them). This allows for automatic updating of minor fixes within versions using something like Watchtower, while allowing for a manual review before doing a more significant upgrade.
To give an example, rather than pulling image: jellyfin/jellyfin:latest, you can configure to pull image: jellyfin/jellyfin:10.9, grab any upgrades to that automatically and quickly (good for security/bug fixes), but when 10.10 arrives, upgrade will require manual intervention (in case any changes requiring manual / config interventions are introduced).
To give an example, rather than pulling image: jellyfin/jellyfin:latest, you can configure to pull image: jellyfin/jellyfin:10.9, grab any upgrades to that automatically and quickly (good for security/bug fixes), but when 10.10 arrives, upgrade will require manual intervention (in case any changes requiring manual / config interventions are introduced).