I would say yes. If you have a good test coverage in place, and no breaking changes in the minor upgrade of a package, why not? The idea is not to merge every day on every updatr, but if you do it on a weekly basis, per the new versions, it won't be that noisy

All I can say is that this used to really scare me, but I've never had an image break from just running nightly builds with the same dockerfile auto-grabbing the latest patch version fixes. Conversely, this happens frequently with SCA type vulnerabilities bumping open source library versions.