diff --git a/charts/poznote/Chart.yaml b/charts/poznote/Chart.yaml
index 523ef1d7..6d7bae21 100644
--- a/charts/poznote/Chart.yaml
+++ b/charts/poznote/Chart.yaml
@@ -4,7 +4,7 @@ name: poznote
 description: Self-hosted note-taking and documentation platform with SQLite persistence
 type: application
 version: 1.0.1
-appVersion: "6.29.0"
+appVersion: "6.30.2"
 kubeVersion: ">=1.26.0-0"
 home: https://helmforge.dev/docs/charts/poznote
 sources:
@@ -24,8 +24,8 @@ maintainers:
 icon: https://helmforge.dev/icons/charts/poznote.png
 annotations:
   artifacthub.io/changes: |
-    - kind: added
-      description: "add chart (#630)"
+    - kind: changed
+      description: "bump poznote to 6.30.2 (#703)"
   artifacthub.io/category: skip-prediction
   artifacthub.io/license: Apache-2.0
   artifacthub.io/prerelease: "false"
diff --git a/charts/poznote/DESIGN.md b/charts/poznote/DESIGN.md
index 0e8f8356..4fb18c9f 100644
--- a/charts/poznote/DESIGN.md
+++ b/charts/poznote/DESIGN.md
@@ -14,10 +14,10 @@ Scaling above one pod is blocked because Poznote uses SQLite for persistence and
 The chart uses the official upstream image:
 
 ```text
-ghcr.io/timothepoznanski/poznote:6.29.0
+ghcr.io/timothepoznanski/poznote:6.30.2
 ```
 
-The tag maps to the upstream `6.29.0` release and publishes Linux `amd64` and `arm64` manifests.
+The tag maps to the upstream `6.30.2` release and publishes Linux `amd64` and `arm64` manifests.
 
 ## Database
 
diff --git a/charts/poznote/README.md b/charts/poznote/README.md
index 69c56e1e..0d837ae2 100644
--- a/charts/poznote/README.md
+++ b/charts/poznote/README.md
@@ -71,7 +71,7 @@ ingress:
 | Parameter | Description | Default |
 |-----------|-------------|---------|
 | `image.repository` | Image repository | `ghcr.io/timothepoznanski/poznote` |
-| `image.tag` | Image tag | `6.29.0` |
+| `image.tag` | Image tag | `6.30.2` |
 | `image.pullPolicy` | Pull policy | `IfNotPresent` |
 
 #### Application Parameters
@@ -138,6 +138,16 @@ This chart intentionally does NOT:
 - Provide a database subchart (SQLite is embedded)
 - Bundle the MCP server container (separate deployment concern)
 
+## Upgrade Notes
+
+Poznote `6.30.2` is a stable UI, backup, API, and security hardening release.
+Upstream highlights include brute-force login throttling, improved backup import
+validation, trashed notes included in exports, new REST API endpoints, MCP server
+fixes, dark mode fixes, and mobile/task editing fixes. No Kubernetes-facing
+configuration changes are required by this chart, but back up the `data` PVC
+before upgrading because it stores the SQLite database, notes, attachments, and
+application configuration.
+
 ## Security Scan
 
 Security Scan: `poznote`
diff --git a/charts/poznote/tests/deployment_test.yaml b/charts/poznote/tests/deployment_test.yaml
index 089deb78..45e310da 100644
--- a/charts/poznote/tests/deployment_test.yaml
+++ b/charts/poznote/tests/deployment_test.yaml
@@ -35,7 +35,7 @@ tests:
     asserts:
       - equal:
           path: spec.template.spec.containers[0].image
-          value: "ghcr.io/timothepoznanski/poznote:6.29.0"
+          value: "ghcr.io/timothepoznanski/poznote:6.30.2"
 
   - it: should expose HTTP port 80
     template: templates/deployment.yaml
diff --git a/charts/poznote/values.yaml b/charts/poznote/values.yaml
index c9ea4ba1..3c7d93b4 100644
--- a/charts/poznote/values.yaml
+++ b/charts/poznote/values.yaml
@@ -13,7 +13,7 @@ image:
   # -- Official Poznote container image repository.
   repository: ghcr.io/timothepoznanski/poznote
   # -- Pinned Poznote image tag. Floating tags such as latest are not used by default.
-  tag: "6.29.0"
+  tag: "6.30.2"
   # -- Kubernetes image pull policy.
   pullPolicy: IfNotPresent