[kokey]

When I used to maintain a GitLab server I used to do exactly this by upgrading almost a month behind their schedule.

[passerby1]

The problem with this approach is being vilnerable to major zero-days (like 30k servers hack in Nov 2021) every month.