Could you tell which YubiKey model you’re using and on which device? (Either here or in a DM)
Some older YubiKey models might not be compatible with discoverable passkeys which II 2.0 depends upon. This means in practice, you should be able to authenticate during the upgrade but wouldn’t be able to use it to confirm the upgrade (create new passkey).