diff --git a/bootstrap/appset-helm.yaml b/bootstrap/appset-helm.yaml
index 7232af3..2abfcf6 100644
--- a/bootstrap/appset-helm.yaml
+++ b/bootstrap/appset-helm.yaml
@@ -120,7 +120,7 @@ spec:
         repoURL: https://SonarSource.github.io/helm-chart-sonarqube
         version: 2026.4.1
         syncWave: '20'
-        valueURL: https://raw.githubusercontent.com/ebpro/gitops/main/helm/releases/sonarqube/values.yaml?v=4
+        valueURL: https://raw.githubusercontent.com/ebpro/gitops/main/helm/releases/sonarqube/values.yaml?v=5
       - app: tempo
         chart: tempo
         namespace: tempo
diff --git a/helm/releases/sonarqube/values.yaml b/helm/releases/sonarqube/values.yaml
index 5372fd4..e51eb8c 100644
--- a/helm/releases/sonarqube/values.yaml
+++ b/helm/releases/sonarqube/values.yaml
@@ -31,10 +31,11 @@ resources:
   requests:
     cpu: 500m
     memory: 2Gi
-  # TEMP 2026-09-14 (sonarqube-267-empty-projects): 26.5.0 web-layer javaagent + web-app zip override removed to isolate 26.7 search regression. CE-side plugin config intentionally unchanged.
+  # TEMP 2026-09-14 (sonarqube-267-empty-projects): 26.5.0 web-app zip override removed; web javaagent restored (the branch plugin requires it). Experiment E2: isolate webapp override as the search regression cause.
 sonarProperties:
   sonar.ce.javaAdditionalOpts: -javaagent:/opt/sonarqube/extensions/plugins/sonarqube-community-branch-plugin-26.5.0.jar=ce
   sonar.security.textblock.cipherType: AES256
+  sonar.web.javaAdditionalOpts: -javaagent:/opt/sonarqube/extensions/plugins/sonarqube-community-branch-plugin-26.5.0.jar=web
   sonar.web.sso.enable: "true"
   sonar.web.sso.loginHeader: "Gap-Auth"
   sonar.web.sso.nameHeader: "Gap-Auth"