diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2708cf40c8c6b028265bf9d6bb810c39c07376c3..2f8ce5fcb399cf74c4f302f8112496ebfb1d6bef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+# [6.4.0](https://gitlab.com/to-be-continuous/python/compare/6.3.5...6.4.0) (2023-11-02)
+
+
+### Features
+
+* add vault variant ([bf678c4](https://gitlab.com/to-be-continuous/python/commit/bf678c4d300c77f3805b016f9a74a29b4c520af5))
+
 ## [6.3.5](https://gitlab.com/to-be-continuous/python/compare/6.3.4...6.3.5) (2023-10-16)
 
 
diff --git a/README.md b/README.md
index cbb70e6544a037208e314acae02175f141233cc6..ba8fb843e92bcf20dba3a1765bcb1655fe9090d1 100644
--- a/README.md
+++ b/README.md
@@ -9,7 +9,7 @@ In order to include this template in your project, add the following to your `gi
 ```yaml
 include:
   - project: 'to-be-continuous/python'
-    ref: '6.3.5'
+    ref: '6.4.0'
     file: '/templates/gitlab-ci-python.yml'
 ```
 
@@ -430,11 +430,11 @@ With:
 include:
   # main template
   - project: 'to-be-continuous/python'
-    ref: '6.3.5'
+    ref: '6.4.0'
     file: '/templates/gitlab-ci-python.yml'
   # Vault variant
   - project: 'to-be-continuous/python'
-    ref: '6.3.5'
+    ref: '6.4.0'
     file: '/templates/gitlab-ci-python-vault.yml'
 
 variables:
diff --git a/templates/gitlab-ci-python-vault.yml b/templates/gitlab-ci-python-vault.yml
index eb8a84d9a3398fac9e13a83747d32106c3c1747d..69f6dc80924960920d629928ef2eade8bbefca88 100644
--- a/templates/gitlab-ci-python-vault.yml
+++ b/templates/gitlab-ci-python-vault.yml
@@ -12,7 +12,7 @@ variables:
 .python-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "python", "6.3.5"]
+      command: ["--service", "python", "6.4.0"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-python.yml b/templates/gitlab-ci-python.yml
index 4941a8d56209e09ef61c4a5af1912f439e36b71b..380732f12a1bd459ab5c114f72dee16a6b62fd89 100644
--- a/templates/gitlab-ci-python.yml
+++ b/templates/gitlab-ci-python.yml
@@ -636,7 +636,7 @@ stages:
   image: $PYTHON_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "python", "6.3.5"]
+      command: ["--service", "python", "6.4.0"]
   # Cache downloaded dependencies and plugins between builds.
   # To keep cache across branches add 'key: "$CI_JOB_NAME"'
   cache: