When to upgrade docker (and how)?

It is quite safe since the container file is not touched.