There are some projects, that do not offer latest or a general tag to pin a major version. So you might need to account for that.
Also since a few years ago you can specify pull_policy: always in the docker-compose.yaml to always pull the images on start. That should at least auto update the containers on a server reboot after OS/Kernel updates.









There’s also a relevant xkcd for that.