diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1d8c859dafb5186215f4e08f3f60f22e15fa87b8..b51a9bd7884da5415aa425c9271c5bc072106d1a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+# [3.13.0](https://gitlab.com/to-be-continuous/node/compare/3.12.3...3.13.0) (2024-05-17)
+
+
+### Features
+
+* add Semgrep job ([6538ba7](https://gitlab.com/to-be-continuous/node/commit/6538ba71697d4a6e08561206795c3fb6c275de69))
+
 ## [3.12.3](https://gitlab.com/to-be-continuous/node/compare/3.12.2...3.12.3) (2024-05-05)
 
 
diff --git a/README.md b/README.md
index c96370c71582de428bc1639643827db4e5ee3c8e..d64f2b6efae8ba3a1d56793036b51e4e4f49f99e 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,7 @@ Add the following to your `gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.12.3
+  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.13.0
     # 2: set/override component inputs
     inputs:
       image: "registry.hub.docker.com/library/node:20" # ⚠ this is only an example
@@ -31,7 +31,7 @@ Add the following to your `gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/node'
-    ref: '3.12.3'
+    ref: '3.13.0'
     file: '/templates/gitlab-ci-node.yml'
 
 variables:
@@ -490,9 +490,9 @@ With:
 ```yaml
 include:
   # main template
-  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.12.3
+  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node@3.13.0
   # Vault variant
-  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node-vault@3.12.3
+  - component: gitlab.com/to-be-continuous/node/gitlab-ci-node-vault@3.13.0
     inputs:
       # audience claim for JWT
       vault-oidc-aud: "https://vault.acme.host"
diff --git a/templates/gitlab-ci-node-vault.yml b/templates/gitlab-ci-node-vault.yml
index 42d29816c5ce8884647613fad0e69f6046cd7f75..e4e206a4ce4423d4dbcefdc23c57abb88e5df229 100644
--- a/templates/gitlab-ci-node-vault.yml
+++ b/templates/gitlab-ci-node-vault.yml
@@ -22,7 +22,7 @@ variables:
 .node-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "node", "3.12.3"]
+      command: ["--service", "node", "3.13.0"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-node.yml b/templates/gitlab-ci-node.yml
index b2c90ebf98ac864cc7c71d98d140f7fe8b6e376c..503853bd4d986949fa540ebb2527db424e4a9873 100644
--- a/templates/gitlab-ci-node.yml
+++ b/templates/gitlab-ci-node.yml
@@ -603,7 +603,7 @@ stages:
   image: $NODE_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "node", "3.12.3"]
+      command: ["--service", "node", "3.13.0"]
   variables:
     # Yarn cache (better than --cache-folder option, deprecated)
     YARN_CACHE_FOLDER: "$CI_PROJECT_DIR/$NODE_PROJECT_DIR/.yarn"