diff --git a/helm/reuse-surface-values.yaml b/helm/reuse-surface-values.yaml
index af38bc2..439be8a 100644
--- a/helm/reuse-surface-values.yaml
+++ b/helm/reuse-surface-values.yaml
@@ -1,8 +1,11 @@
 # Production overrides for reuse-surface federation hub.
 # REUSE_SURFACE_TOKEN is supplied via Secret reuse-surface-env.
+# REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET (REUSE-WP-0019-T02, POST
+# /v1/webhooks/forgejo) is the same Secret's job -- not yet added as of
+# this image; the webhook endpoint returns 503 until it is.
 
 image:
-  tag: "cb7a6e4"
+  tag: "e3ae22e"
 
 landing:
   enabled: true