Is it by design that updates via web UI can provoke breaking changes?

It makes a valiant effort, but if underlying parts are broken there’s nothing it can do.

Dashboard.literatecomputing.com will do a command line upgrade with a click, and it’ll update docker if it’s required. It’ll also restart the existing container of building a new one fails.

There are still things that can go wrong.

The biggest benefit to the ux upgrade is lack of downtime, which a two container setup mostly provides.