Fix UpdateReport.substitute to not drop missing artifacts