I use tugtainer for managing updates to containers (not automatic). and aside from that, I just apt upgrade every so often.