Not a recommendation, but more a personal opinion.
It depends on your requirements. I have customers with host uptimes of >800 days and they are happy with the environment. Others have the requirement to apply every security patch asap. Unless there are such requirements, I usually read the release notes and then decide whether a patch/upgrade improves the environment in a way that's worth applying it.
André