If you have set System settings (icon in the Launcher) > Software and updates > / Updates \ > Automatically check for updates:
to something else than "Never", then you shouldn't need to do anything from the command line.
$ sudo apt-get update
will launch a process to check for available updates "now".
$ sudo apt-get upgrade
will install the updates based on what was found.
$ sudo apt-get dist-upgrade
simplified: if any packages were "held back" during the upgrade, this will install them.
For upgrade and dist-upgrade, and also anything install, remove or purge:
Do check thoroughly what it says before actually letting it to do its thing.
There MIGHT be surprises.
Links worth a look:
What does "sudo apt-get update" do?
https://askubuntu.com/a/694412/22949