We ideally use oxipng on all the images and sometimes even pngquant. It would be ideal to bake these tools into our container creation and have the release notes automatically run oxipng -D on the resulting images.

pngquant is great too, but it is lossy and would need to be run manually (or be a manual step that's checked). oxipng is not lossy (visually) and is safe to automate.