I had meant to say that you update the system when security updates come out, automatically.

But upgrade to the next stable release once a year or so, when one becomes available. (Be a point release, or a real update.)