dockerfiles

Upgrades pinned Docker base images, pip/GitHub/apt dependencies, Ruby lockfiles, and matching tests/docs across this dockerfiles monorepo, then runs the full ./run test (and ./run build where applicable) suite before considering the work done. Use when the user asks to upgrade all dependencies, bump images to latest, refresh pins, run a repo-wide dependency refresh, or validate after version bumps. After `goss`, fan out parallel `./run test` / `./run build` for independent projects.