diff --git a/paperless-ngx/Chart.yaml b/paperless-ngx/Chart.yaml
index 2059ed2..e896ac3 100644
--- a/paperless-ngx/Chart.yaml
+++ b/paperless-ngx/Chart.yaml
@@ -5,7 +5,7 @@ icon: https://raw.githubusercontent.com/paperless-ngx/paperless-ngx/dev/src-ui/s
 
 type: application
 
-version: 14.1.0+up3.3.1
+version: 15.0.0+up3.3.1
 
 appVersion: 3.3.1
 
@@ -57,7 +57,7 @@ dependencies:
     #
     # Independent of appVersion: raising it is a patch or minor bump of this
     # chart and is never tied to the paperless-ngx image.
-    version: "1.0.0+up9.1.2.alpine"
+    version: "2.0.0+up9.1.2.alpine"
     # Our own published index, and the READ path only - anonymously readable
     # (measured), so ci/helm-dependencies.sh needs no credential and was not
     # touched. The publish target and its credentials still live in 1Password
diff --git a/stalwart/Chart.yaml b/stalwart/Chart.yaml
index 2c97412..2275b6d 100644
--- a/stalwart/Chart.yaml
+++ b/stalwart/Chart.yaml
@@ -37,7 +37,7 @@ type: application
 #
 # Note for whoever bumps this next: the suffix tracks appVersion, so a major
 # here keeps the +up<appVersion> it was merged with.
-version: 2.0.0+upv0.16.26
+version: 3.0.0+upv0.16.26
 appVersion: "v0.16.26"
 
 maintainers:
@@ -95,7 +95,7 @@ dependencies:
     #
     # Independent of appVersion: raising it is a patch or minor bump of this
     # chart and is never tied to the Stalwart image.
-    version: "1.0.0+up9.1.2.alpine"
+    version: "2.0.0+up9.1.2.alpine"
     # Our own published index, and the READ path only. It is anonymously
     # readable - measured 2026-10-02: GET .../index.yaml returns 200 without
     # credentials - so ci/helm-dependencies.sh needs no secret and was not