This means:
- jenkins-debian1: the debian package build [1]
- thyssen: jenkins [2]
It should be fine to just upgrade the nodes as their respective major tooling are part of debian packages.
[1] The main tools here are sbuild and chroot.
[2] The main tooling are within docker constraint (so it's "pinned")