diff --git a/CHANGELOG.md b/CHANGELOG.md
index 62f3a9e..a5a9d52 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,19 @@ See [keep a changelog] for information about writing changes to this log.
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-03-10
+
+* Upgraded open-webui to v0.8.5 (last release was v0.6.43)
+  See [release](https://github.com/open-webui/open-webui/releases) for information about changes. This is a big jump in
+  versions, so we recommend you to check the release notes. _Note_ that you should set repalica count to 1 before
+  upgrading and back up once upgraded, which is due to the database migrations.
+* Groups share settings have changes, so it now has the values: "members" (string), True (boolean — anyone), False
+  (boolean — no one). Where "members" matches the default behavior from the last release. It is this change that has
+  held release here back.
+* The
+  tool [Open WebUI Permissions Manager](https://github.com/AarhusAI/open-webui-permissions-manager?tab=readme-ov-file#share-command)
+  has been updated to help update all groups to the same share setting.
+
 ## [0.2.0] - 2026-02-25
 
 * Changed nodeSelectorTerm on vllm deployments, for better upgradeability
@@ -32,6 +45,7 @@ See [keep a changelog] for information about writing changes to this log.
 * Disabled SSO in Open-WebUI.
 
 [Unreleased]: https://github.com/AarhusAI/documentation/compare/0.1.1...HEAD
-
+[0.3.0]: https://github.com/AarhusAI/documentation/compare/0.2.0...0.3.0
+[0.2.0]: https://github.com/AarhusAI/documentation/compare/0.1.1...0.2.0
 [0.1.1]: https://github.com/AarhusAI/documentation/compare/0.1.0...0.1.1
 [0.1.0]: https://github.com/AarhusAI/documentation/releases/tag/0.1.0
diff --git a/applications/openwebui/values.yaml b/applications/openwebui/values.yaml
index 8e0ae84..fac61f1 100644
--- a/applications/openwebui/values.yaml
+++ b/applications/openwebui/values.yaml
@@ -7,7 +7,7 @@ open-webui:
   # -- Open WebUI image tags can be found here: https://github.com/open-webui/open-webui
   image:
     repository: ghcr.io/aarhusai/open-webui
-    tag: "v0.6.43-1"
+    tag: "v0.8.5-1"
     pullPolicy: "IfNotPresent"
 
   ollama:
@@ -298,6 +298,8 @@ open-webui:
           key: WEBUI_SECRET_KEY
     - name: ENABLE_NOTES
       value: "False"
+    - name: DEFAULT_GROUP_SHARE_PERMISSION
+      value: "members"
 
     # AAK ODIC patch config
     - name: AAK_OAUTH_ENABLE_ROLE_GROUPS_MAPPING
@@ -308,6 +310,8 @@ open-webui:
       value: "extensionAttribute7"
     - name: AAK_OAUTH_GROUP_ID_SEPARATOR
       value: ";"
+    - name: OAUTH_GROUP_DEFAULT_SHARE
+      value: "members"
 
     # Redis cache
     - name: REDIS_URL