At the top of your stack is the web server in which you host your web application in. This is a live, production system that is likely exposed to the internet, thus one that is at most risk. It should be judiciously kept up to date.
Ideally, your release pipeline resembles the one described in Chapter 3, Prepare Angular App for Production Release, where your frontend application is served by a containerized low-profile instance. This can be the minimal-node-web-server that I publish and maintain or an Nginx-based instance. In either case, an upgrade is simple by changing version number listed next to your base image:
Dockerfile
FROM duluca/minimal-node-web-server:8.6.0
WORKDIR /usr/src/app
COPY dist public
It is always a good idea to specify the version number of the base Docker image you're using. Otherwise, it will default to a latest behavior, which...
