diff --git a/charts/base/Chart.lock b/charts/base/Chart.lock
index 215ab5e..2eac893 100644
--- a/charts/base/Chart.lock
+++ b/charts/base/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
   version: 0.1.3
 - name: zero-trust-mesh
   repository: https://dasmeta.github.io/helm
-  version: 0.1.0
-digest: sha256:013360b8a9b5d60d8da7e491dff6ace64b37db04337e0f76f70064da6f10b8d3
-generated: "2026-05-04T16:34:45.692269+04:00"
+  version: 0.1.3
+digest: sha256:e7ff901ebce4f9fa8dbaea29f55b6504a4c102dfab5184ab65516eb11cbbfdbb
+generated: "2026-05-12T18:41:21.80521+04:00"
diff --git a/charts/base/Chart.yaml b/charts/base/Chart.yaml
index 0475b99..2408a9c 100644
--- a/charts/base/Chart.yaml
+++ b/charts/base/Chart.yaml
@@ -15,13 +15,13 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.3.29
+version: 0.3.30
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.3.29"
+appVersion: "0.3.30"
 
 dependencies:
   - name: gateway-api
@@ -30,7 +30,7 @@ dependencies:
     alias: gatewayApi
     condition: gatewayApi.enabled
   - name: zero-trust-mesh
-    version: 0.1.0
+    version: 0.1.3
     repository: "https://dasmeta.github.io/helm"
     alias: zeroTrustMesh
     condition: zeroTrustMesh.enabled
diff --git a/charts/base/charts/zero-trust-mesh-0.1.0.tgz b/charts/base/charts/zero-trust-mesh-0.1.0.tgz
deleted file mode 100644
index 9546ba1..0000000
Binary files a/charts/base/charts/zero-trust-mesh-0.1.0.tgz and /dev/null differ
diff --git a/charts/base/charts/zero-trust-mesh-0.1.3.tgz b/charts/base/charts/zero-trust-mesh-0.1.3.tgz
new file mode 100644
index 0000000..8f5b13f
Binary files /dev/null and b/charts/base/charts/zero-trust-mesh-0.1.3.tgz differ
diff --git a/charts/base/values.yaml b/charts/base/values.yaml
index b3d46e4..0bfc573 100644
--- a/charts/base/values.yaml
+++ b/charts/base/values.yaml
@@ -1026,10 +1026,13 @@ gatewayApi:
   #           - providers:
   #               - name: envoy
 
-# zero-trust-mesh subchart (zero-trust-mesh-0.1.0). Disabled by default; enable per release.
+# zero-trust-mesh subchart (zero-trust-mesh-0.1.3). Disabled by default; enable per release.
 # Values under this key are passed to the subchart.
 zeroTrustMesh:
   enabled: false
+  # Keep empty by default so enabling the subchart from base does not create
+  # sample service or external egress allow rules.
+  allowTo: []
 
   # enabled: true
   # namespaceResourcesEnabled: true