The gist is that you simply replace the storagenode binary in the docker container with the updated version.
There is also a flag to disable the version updater, but according to an entry in Gerrit it’s bugged at the moment. But so far I have not had my nodes downgraded to an older version.