diff --git a/src/data/playground-configs.ts b/src/data/playground-configs.ts
index 60ccd21..757f464 100644
--- a/src/data/playground-configs.ts
+++ b/src/data/playground-configs.ts
@@ -8744,6 +8744,13 @@ export const chartConfigs: Record<string, ChartConfig> = {
     {
       name: 'General',
       fields: [
+        {
+          label: 'Image Tag',
+          key: 'image.tag',
+          type: 'text',
+          default: '0.28.1',
+          description: 'Pinned NoteDiscovery image tag',
+        },
         {
           label: 'HTTP Port',
           key: 'app.port',
diff --git a/src/pages/docs/charts/notediscovery.mdx b/src/pages/docs/charts/notediscovery.mdx
index 608b088..3a3f35b 100644
--- a/src/pages/docs/charts/notediscovery.mdx
+++ b/src/pages/docs/charts/notediscovery.mdx
@@ -10,7 +10,7 @@ Deploy [NoteDiscovery](https://github.com/gamosoft/NoteDiscovery) on Kubernetes
 
 ## Overview
 
-The HelmForge NoteDiscovery chart uses the official `ghcr.io/gamosoft/notediscovery:0.27.3` image and deploys a single-writer web application.
+The HelmForge NoteDiscovery chart uses the official `ghcr.io/gamosoft/notediscovery:0.28.1` image and deploys a single-writer web application.
 NoteDiscovery listens on port `8000`, stores durable notes under `/app/data`, and reads its runtime configuration from `/app/config.yaml`.
 
 The default topology is one persistent Deployment replica with a chart-managed PVC and generated unauthenticated config. When authentication is enabled, the generated config file is stored in a Secret. Production installs should normally use `auth.existingSecret` with a complete `config.yaml`.
@@ -216,6 +216,14 @@ rules.
 
 Back up the PVC in every production deployment. The default `/app/data` directory contains notes and local application data.
 
+## Upgrade Notes
+
+NoteDiscovery `0.28.1` includes large-vault indexing and startup improvements
+from `0.28.0`, plus a task rendering fix. The upstream app can now override
+storage paths with `NOTES_DIR` and `PLUGINS_DIR`; this chart still writes the
+data directory into `config.yaml` from `persistence.mountPath`, so keep that
+path stable and back up the PVC before upgrading production vaults.
+
 ## Additional Resources
 
 - [NoteDiscovery source](https://github.com/gamosoft/NoteDiscovery)