diff --git a/CHANGELOG.md b/CHANGELOG.md
index b51a9bd7884da5415aa425c9271c5bc072106d1a..10fc672fe53919b58bf939d360c4d3de744502dd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+# [3.14.0](https://gitlab.com/to-be-continuous/node/compare/3.13.0...3.14.0) (2024-06-05)
+
+
+### Features
+
+* fail Semgrep on internal errors (wrong ruleset or else) ([a7df396](https://gitlab.com/to-be-continuous/node/commit/a7df39621772079ba2403ceb09c964da970bb2e7))
+
 # [3.13.0](https://gitlab.com/to-be-continuous/node/compare/3.12.3...3.13.0) (2024-05-17)
 
 
diff --git a/README.md b/README.md
index 955cf2c46c67d724b5b4acb6944e0aa58940b060..8fbf9078ede2b8cacc58e8c129e89cf3b9704e43 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,7 @@ Add the following to your `gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.13.0
+  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.14.0
     # 2: set/override component inputs
     inputs:
       image: "registry.hub.docker.com/library/node:20" # ⚠ this is only an example
@@ -31,7 +31,7 @@ Add the following to your `gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/node'
-    ref: '3.13.0'
+    ref: '3.14.0'
     file: '/templates/gitlab-ci-node.yml'
 
 variables:
@@ -490,9 +490,9 @@ With:
 ```yaml
 include:
   # main template
-  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.13.0
+  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.14.0
   # Vault variant
-  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node-vault@3.13.0
+  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node-vault@3.14.0
     inputs:
       # audience claim for JWT
       vault-oidc-aud: "https://vault.acme.host"
diff --git a/templates/gitlab-ci-node-vault.yml b/templates/gitlab-ci-node-vault.yml
index e4e206a4ce4423d4dbcefdc23c57abb88e5df229..e5e97c27aa0f657b4d6b3c2c1a4c10d9bd869908 100644
--- a/templates/gitlab-ci-node-vault.yml
+++ b/templates/gitlab-ci-node-vault.yml
@@ -22,7 +22,7 @@ variables:
 .node-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "node", "3.13.0"]
+      command: ["--service", "node", "3.14.0"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-node.yml b/templates/gitlab-ci-node.yml
index 20ff22a318160209cf3097035815f3a4ef1faf13..09007ca8d54514c79452f8d51155b93485f118d8 100644
--- a/templates/gitlab-ci-node.yml
+++ b/templates/gitlab-ci-node.yml
@@ -603,7 +603,7 @@ stages:
   image: $NODE_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "node", "3.13.0"]
+      command: ["--service", "node", "3.14.0"]
   variables:
     # Yarn cache (better than --cache-folder option, deprecated)
     YARN_CACHE_FOLDER: "$CI_PROJECT_DIR/$NODE_PROJECT_DIR/.yarn"