I've always upgraded everything as soon as possible. This is code that has been written to improve existing code. Bugs have been fixed, security issues patched. Testing has been done, and it's good enough to push to customers.

I've always done this, and short of when I used Debian Sid (I think it was), I've never been bitten by it.