It would have to be two-step if even possible. In order to perform an in-place upgrade licensed installation media must be used. An in-place is very risky not to mention having to do two steps. Better option is a clean install, patch fully then migrate the roles over to it.
--please don't forget to upvote
and Accept as answer
if the reply is helpful--