Are updates released all at once or ad hoc?

They are released as and when they are needed.

Users will see security updates immediately. But otherwise, the Software Updater will (by default) only notify users once a week.

There is additionally some experimental support for phasing updates out to a higher and higher percentage of users over time. This isn't widely used yet, to my knowledge. But it's built into the infrastructure.