How to play safe? Make sure you always do a backup before any updates, especially if you plan to upgrade your existing installation.
It is also recommend to make a backup if you are on a controller version later than 5.4.16. Once you upgrade the firmware the controller will be on 5.4.16, so if you were on something different then you'll need to reinstall it and then restore your backup.
Using a release other than the one mentioned? If you prefer to upgrade the firmware but still wish to continue using the controller version you were previously on, make sure to create a backup of your controller prior to upgrading. Then upgrade the firmware, purge unifi, install the previous version using the .deb file, then restore your controller backup during the setup wizard. This method will avoid the need to downgrade your controller, which isn't supported.
Notes: All system customizations are removed on firmware upgrade. This would include the UniFi VoIP controller, if you have it installed. Please make sure to backup your VoIP controller configuration, and any other customizations prior to firmware upgrade.
Changes from 0.6.4: UniFi Controller:
Bundle UniFi Controller 5.4.16. SeeHERE for controller release notes.
Update bundled Oracle JDK to 8u131.
Backend changes to prepare for non-root controller (LED support).*
*Requires UniFi controller 5.6.6 or later.
Add da, it and pt_BR translations.
Add username validation when username is changed via UCK's local WebUI.
How to update the latest firmware:
From UniFi Cloud Key WebUI: Maintanance -> CHECK FOR UPDATES (in FIRMWARE section) -> UPDATE NOW.
From UniFI Controller: Settings -> Maintenance -> CHECK FOR UPDATES (in CloudKey Firmware section) -> APPLY UPDATE
From UniFi Cloud Key WebUI: Maintanance -> UPDATE MANUALLY. From here you can either paste the URL, or if you downloaded the binary you can select the file locally on your computer.