diff --git a/CHANGELOG.md b/CHANGELOG.md
index 75544e81796b894c3353a5e818c62f10bfe2793c..fe547160b00a217daa276c10d7461261d00a11d7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [4.3.1](https://gitlab.com/to-be-continuous/maven/compare/4.3.0...4.3.1) (2025-01-31)
+
+
+### Bug Fixes
+
+* **sbom:** only generate SBOMs on prod branches, integ branches and release tags ([88eb63d](https://gitlab.com/to-be-continuous/maven/commit/88eb63d5cfcf910eac98d2b0c5edbde72a6b5873))
+
 # [4.3.0](https://gitlab.com/to-be-continuous/maven/compare/4.2.0...4.3.0) (2025-01-28)
 
 
diff --git a/README.md b/README.md
index c484ef9893e15d1a8a65ff3f4856745cb2400f7d..71768d762fbd8ce74e484a3a90ac668a713f57e6 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ Add the following to your `.gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.1
     # 2: set/override component inputs
     inputs:
       # ⚠ this is only an example
@@ -30,7 +30,7 @@ Add the following to your `.gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/maven'
-    ref: '4.3.0'
+    ref: '4.3.1'
     file: '/templates/gitlab-ci-maven.yml'
 
 variables:
@@ -534,9 +534,9 @@ All authentication methods should use masked GitLab environment variables.
 ```yaml
 include:
   # main template
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.1
   # Jib is implemented as an extension to Maven, and uses supporting features of the TBC Maven template
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-jib@4.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-jib@4.3.1
 ```
 
 ## Variants
@@ -579,9 +579,9 @@ With:
 ```yaml
 include:
   # main template
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.1
   # Vault variant
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-vault@4.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-vault@4.3.1
 
 variables:
     # Vault configuration
diff --git a/templates/gitlab-ci-maven-vault.yml b/templates/gitlab-ci-maven-vault.yml
index 9584991a908d6448de10f27dc15f39ad5dd288c9..1f6c52d6218a64d1cc076fc6f2bdd19d9c489601 100644
--- a/templates/gitlab-ci-maven-vault.yml
+++ b/templates/gitlab-ci-maven-vault.yml
@@ -22,7 +22,7 @@ variables:
 .mvn-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "maven", "4.3.0"]
+      command: ["--service", "maven", "4.3.1"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-maven.yml b/templates/gitlab-ci-maven.yml
index 3f3ed0351549d9b3ea4e7c1b7a7d1c971992f172..745cc251e9c9bdfb5f3614f5a3a9598fb23c45c4 100644
--- a/templates/gitlab-ci-maven.yml
+++ b/templates/gitlab-ci-maven.yml
@@ -611,7 +611,7 @@ stages:
   image: $MAVEN_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "maven", "4.3.0"]
+      command: ["--service", "maven", "4.3.1"]
   before_script:
     - !reference [.mvn-scripts]
     - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"