During the window, a last-minute discovery surfaced: an embedded cron job in the package scheduled a data-import at 03:00 that assumed access to a retired SFTP server. If left running, it would spam error logs and fill disk partitions. The team disabled that job before starting the upgrade.