diff --git a/charts/appwrite/Chart.yaml b/charts/appwrite/Chart.yaml
index 27e3cab7..d55a9329 100644
--- a/charts/appwrite/Chart.yaml
+++ b/charts/appwrite/Chart.yaml
@@ -4,7 +4,7 @@ name: appwrite
 description: Appwrite self-hosted backend-as-a-service platform with MariaDB and Redis
 type: application
 version: 1.2.3
-appVersion: "1.9.0"
+appVersion: "1.9.5"
 kubeVersion: ">=1.26.0-0"
 icon: https://helmforge.dev/icons/charts/appwrite.png
 home: https://helmforge.dev
diff --git a/charts/appwrite/README.md b/charts/appwrite/README.md
index 011538a8..1a3d0979 100644
--- a/charts/appwrite/README.md
+++ b/charts/appwrite/README.md
@@ -61,7 +61,7 @@ When ingress is enabled, requests are routed by path:
 | `image.repository` | `appwrite/appwrite` | Appwrite server image |
 | `image.tag` | `""` (uses appVersion) | Image tag |
 | `console.image.repository` | `appwrite/console` | Console image |
-| `console.image.tag` | `7.5.7` | Console image tag |
+| `console.image.tag` | `8.7.5` | Console image tag |
 | `appwrite.locale` | `en` | Application locale |
 | `appwrite.domain` | `""` (auto-detected) | Appwrite domain |
 | `appwrite.openSslKeyV1` | `""` (auto-generated) | 64-char hex encryption key |
@@ -76,6 +76,14 @@ When ingress is enabled, requests are routed by path:
 
 See [`values.yaml`](values.yaml) for the full configuration reference.
 
+## Upgrade Notes
+
+Appwrite 1.9.5 requires the upstream database migration step even when upgrading
+from Appwrite 1.9.0. After `helm upgrade`, run the Appwrite migrate command
+against an Appwrite API pod before returning production traffic to the release,
+for example with `kubectl exec deploy/<release>-appwrite-api -- appwrite migrate`
+adjusted to the release name and namespace.
+
 ## External Database
 
 To use an external MariaDB instead of the subchart:
diff --git a/charts/appwrite/tests/deployment_api_test.yaml b/charts/appwrite/tests/deployment_api_test.yaml
index bbad0028..8c3d1b47 100644
--- a/charts/appwrite/tests/deployment_api_test.yaml
+++ b/charts/appwrite/tests/deployment_api_test.yaml
@@ -18,7 +18,7 @@ tests:
     asserts:
       - equal:
           path: spec.template.spec.containers[0].image
-          value: "docker.io/appwrite/appwrite:1.9.0"
+          value: "docker.io/appwrite/appwrite:1.9.5"
 
   - it: should run http.php entrypoint
     template: templates/deployment-api.yaml
diff --git a/charts/appwrite/tests/deployment_console_test.yaml b/charts/appwrite/tests/deployment_console_test.yaml
index 554565e4..610bb4ec 100644
--- a/charts/appwrite/tests/deployment_console_test.yaml
+++ b/charts/appwrite/tests/deployment_console_test.yaml
@@ -15,7 +15,7 @@ tests:
     asserts:
       - equal:
           path: spec.template.spec.containers[0].image
-          value: "docker.io/appwrite/console:7.5.7"
+          value: "docker.io/appwrite/console:8.7.5"
 
   - it: should have component label
     asserts:
diff --git a/charts/appwrite/values.yaml b/charts/appwrite/values.yaml
index 0bae53ed..10594957 100644
--- a/charts/appwrite/values.yaml
+++ b/charts/appwrite/values.yaml
@@ -27,7 +27,7 @@ image:
   # -- Appwrite server image repository
   repository: docker.io/appwrite/appwrite
   # -- Appwrite image tag. Defaults to appVersion.
-  tag: "1.9.0"
+  tag: "1.9.5"
   # -- Image pull policy
   pullPolicy: IfNotPresent
 
@@ -36,7 +36,7 @@ console:
     # -- Appwrite console image repository
     repository: docker.io/appwrite/console
     # -- Console image tag
-    tag: "7.5.7"
+    tag: "8.7.5"
     # -- Console image pull policy
     pullPolicy: IfNotPresent
 
@@ -500,4 +500,3 @@ externalSecrets:
   target:
     creationPolicy: Owner
   data: []
-