They explicitly mention in the deployment steps to pin the release number.
After that it’s just a case of reading the patch notes and looking out for breaking changes.

And obviously keeping backups :)