If you create software resources that are updates or service packs, and then associate them with a different software resource by selecting them in the Associations tabs as Service Packs or Software Updates, then when deploying the Software Resource you can select these associated resources to be deployed with the software, thus ensuring it is up to date.

Regarding patch management, Service Packs and all updates are included for 20-25 vendors (Microsoft, Adobe, Java, Skype, Apple, Google, Mozilla, Foxit, RealPlayer, WinZip, etc), so you don't need to worry about packaging those independently.  If you did want to make sure they were included in a deployment, however, you could create the association yourself between the Software Resource and the updates and service packs created by Patch Management.

Does this answer your question?