According to https://wiki.debian.org/DebianReleases#Production_Releases, the current image will be EOL in about one year, so it seems fine to slowly bump it to something more recent.
(As a side-effect, this should also fix the erroneous lint CI failures on Cirrus that can be seen since today, by triggering a fresh build from the ground up.)