You could decide to update dependencies before every release, or more often, before every pull request. Most importantly, you should check regularly and frequently. Ideally, automate the process, then you can set the frequency and conditions of updates without impeding the speed of your development pipeline. Consider monthly or even weekly updates to maximize security, assure compliance and optimize performance.