Who Me Too'd this solution

@MBCL88,

On the GUI:

1) Go to the Device tab

2) Go to the GlobalProtect Client on the bottom left

3) This is where you can download and activate any of the available agent bundles.

On the CLI:

request global-protect-client software check 
# This will refresh the agent list

request global-protect-client software download version <version>
# Initiates a job to download the new agent bundle. Just follow the job and wait for it to complete.

request global-protect-client software activate version <version>
# Initiates the activate process and "installs" the selected version.

Keep in mind if running in an HA pair or if you have multiple gateways you'll want to have the same agent bundle on all of them. You can jump directly from any agent bundle to the next, there's no intermediate upgrades or anything like that.