update changelog with note about case where distribute upgrade can fail