diff --git a/CHANGELOG.md b/CHANGELOG.md
index c588f47a8afc60aecb8214d179c4d81d57cdf2f1..75544e81796b894c3353a5e818c62f10bfe2793c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+# [4.3.0](https://gitlab.com/to-be-continuous/maven/compare/4.2.0...4.3.0) (2025-01-28)
+
+
+### Features
+
+* add vault variant ([a80ac30](https://gitlab.com/to-be-continuous/maven/commit/a80ac3067498bfb9aea04860ee6c839bc0ab7620))
+
 # [4.2.0](https://gitlab.com/to-be-continuous/maven/compare/4.1.0...4.2.0) (2025-01-27)
 
 
diff --git a/README.md b/README.md
index 35b6b58da09088dcddb52821aa5766bae6d64a9f..3186cfe998840bd846291ab214f45f480bf202c7 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ Add the following to your `.gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.2.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.0
     # 2: set/override component inputs
     inputs:
       # ⚠ this is only an example
@@ -30,7 +30,7 @@ Add the following to your `.gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/maven'
-    ref: '4.2.0'
+    ref: '4.3.0'
     file: '/templates/gitlab-ci-maven.yml'
 
 variables:
@@ -533,9 +533,9 @@ All authentication methods should use masked GitLab environment variables.
 ```yaml
 include:
   # main template
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.2.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.0
   # Jib is implemented as an extension to Maven, and uses supporting features of the TBC Maven template
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-jib@4.2.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-jib@4.3.0
 ```
 
 ## Variants
@@ -578,9 +578,9 @@ With:
 ```yaml
 include:
   # main template
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.2.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven@4.3.0
   # Vault variant
-  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-vault@4.2.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/maven/gitlab-ci-maven-vault@4.3.0
 
 variables:
     # Vault configuration
diff --git a/templates/gitlab-ci-maven-vault.yml b/templates/gitlab-ci-maven-vault.yml
index a643c6246a94034a577c09fd833da8da61c5260e..9584991a908d6448de10f27dc15f39ad5dd288c9 100644
--- a/templates/gitlab-ci-maven-vault.yml
+++ b/templates/gitlab-ci-maven-vault.yml
@@ -22,7 +22,7 @@ variables:
 .mvn-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "maven", "4.2.0"]
+      command: ["--service", "maven", "4.3.0"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-maven.yml b/templates/gitlab-ci-maven.yml
index 3d2abe190c1a02d5837aa54c08639459b3715503..6ff9e23588d99f9cc1a47f6e10283486afc4c4c9 100644
--- a/templates/gitlab-ci-maven.yml
+++ b/templates/gitlab-ci-maven.yml
@@ -600,7 +600,7 @@ stages:
   image: $MAVEN_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "maven", "4.2.0"]
+      command: ["--service", "maven", "4.3.0"]
   before_script:
     - !reference [.mvn-scripts]
     - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"