If you use an anonymous identity to sign your states (as is recommended), then contract upgrade flows will not work because of the referenced todos.
Basically, it will always say that you're not referenced in any input states and then quit.
Seems to me the fix is is just a few lines of kotlin...