Hi I have question regarding safe upgrade of an image.

Let us suppose that I have an ECS cluster running and on the instance with the help of docker, I installed Jenkins image and running a docker container. If I want to upgrade Jenkins, what is the Safeway to do?
Imagine that it’s my production server.

Please help.