Ask HN: How frequently should you update your production systems?

Apart from security updates, do you ever consider updating packages/dependencies in your production system? If so what's your approach on making sure nothing blows up?