Oracle Java recommends that users choose a Critical Patch Update (CPU) release of Java rather than a Patch Set Update (PSU) release for general usage unless specifically impacted by a bug that is fixed in the PSU. Quoting relevant content from Oracle's documentation:

Which Java version should I choose: the CPU or the PSU?

Oracle strongly recommends that all Java SE users upgrade to the latest CPU release available for a release family. Most users should choose the CPU release.

Users should only use the corresponding PSU release if they are being impacted by one of the additional bugs fixed in that version as noted in the release notes.

What is the difference between a Java CPU and PSU release?

Java SE Critical Patch Updates (CPU) contain fixes to security vulnerabilities and critical bug fixes.

Java SE Patch Set Updates (PSU) contain all of fixes in the corresponding CPU, as well as additional non-critical fixes. Java PSU releases should only be used if you are being impacted by one of the additional bugs fixed in that version.

Our Supported Platforms documentation does not currently make this distinction. This proposal is to specifically add the verbiage favoring Java CPU releases into our Supported Platforms page.