Idea is that your deploy step should handle both deploying code as well as upgrading OS, so all changes go through same pipeline.