Its also good practice to include the sha256 digest after the version like
DockerImage:v... @sha256:...
If you pull without digest and say the maintainers get compromised and release an update with the same version tag with malicious stuff in it, then you won't pull it automatically since the digest does not match.
It's always good practice to back up your data before doing an upgrade. But in case you need it, you can certainly do a minor version update through compose. If you already have that set up, it'll probably be the easier route.
Your compose file should have a line that looks like this:
possibly with a version number. You can specify which version you want by changing that line. For example:
You can check which versions are available here.
save