Feature request or enhancement

Which use case/requirement will be addressed by the proposed feature?

Right now, the `postgres` container images are published with a major version tag like 15, 16, 17,… and updates to the container images are published under the same version tag. I want to be able to be certain that a published container image version does not change its content intransparently so that an image I pull using a certain tag is exactly the same as when a colleague of mine downloads the image with the same tag a few weeks later.

One limited workaround is to use an image checksum to make sure the image's content is the same. Sadly, because of the republishing under the same version tag, my colleague would get an error that no image with the checksum exists if a new version was published under the same version tag. It would be bad DX to have to pull in the new checksum whenever there has been an update to the container image.

Implementation ideas (optional)

Adapt the container image tagging workflow so that new image versions are pushed as `17.0.1`, `17.0.2`, `17.0.3`,… e.g. for PostgreSQL v17.