dockerfile: perform package upgrades