update docker image SHAs