Apart from security updates, do you ever consider updating packages/dependencies in your production system?

If so what's your approach on making sure nothing blows up?