We're currently on Calico 3.14, which supports k8s 1.16-1.18, latest Calico (3.18) supports k8s 1.18-1.20. Once we're on 1.18 we need to upgrade to a later Calico version.
Last upgrade T250863 suggests that this can be done with no impact to network traffic, which is nice.