upgrade scripts: halt on error