You can have a separate refresh/update command and still make the upgrade-command auto-refresh.

(You can also have a --no-refresh flag on the upgrade-command, in case you don’t want the refresh for whatever reason.)