diff --git a/CHANGELOG.md b/CHANGELOG.md
index ec9343c563e1c002d5606fce7f4af404cc989a9f..357f1eece79ba79f3e85c1a065f7e4520b4ee213 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,15 @@
+# [4.0.0](https://gitlab.com/to-be-continuous/sonar/compare/3.3.0...4.0.0) (2023-08-28)
+
+
+### Features
+
+* **oidc:** OIDC authentication support now requires explicit configuration (see doc) ([a617e8e](https://gitlab.com/to-be-continuous/sonar/commit/a617e8e48db080d489ac4824149150827d15f03f))
+
+
+### BREAKING CHANGES
+
+* **oidc:** OIDC authentication support now requires explicit configuration (see doc)
+
 # [3.3.0](https://gitlab.com/to-be-continuous/sonar/compare/3.2.0...3.3.0) (2023-06-15)
 
 
diff --git a/README.md b/README.md
index 94b3d1de5331895a1b470e567bf3789ed3478846..67d255fa01f080719ee2826ac945db336b56f31f 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,7 @@ In order to include this template in your project, add the following to your `gi
 ```yaml
 include:
   - project: 'to-be-continuous/sonar'
-    ref: '3.3.0'
+    ref: '4.0.0'
     file: '/templates/gitlab-ci-sonar.yml'
 ```
 
@@ -94,11 +94,11 @@ With:
 include:
   # main template
   - project: 'to-be-continuous/sonar'
-    ref: '3.3.0'
+    ref: '4.0.0'
     file: '/templates/gitlab-ci-sonar.yml'
   # Vault variant
   - project: 'to-be-continuous/sonar'
-    ref: '3.3.0'
+    ref: '4.0.0'
     file: '/templates/gitlab-ci-sonar-vault.yml'
 
 variables:
diff --git a/templates/gitlab-ci-sonar-vault.yml b/templates/gitlab-ci-sonar-vault.yml
index 1f605cc22bec0bd8d51116c8ff212789b4989173..cf1ddba6d9734821477e08f29f661db7e8ceaaa3 100644
--- a/templates/gitlab-ci-sonar-vault.yml
+++ b/templates/gitlab-ci-sonar-vault.yml
@@ -12,7 +12,7 @@ variables:
 sonar:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "sonar", "3.3.0" ]
+      command: ["--service", "sonar", "4.0.0" ]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-sonar.yml b/templates/gitlab-ci-sonar.yml
index 7425c91d55132f0fa420d23769c3644f0681079c..898fa124e142bef6307eb4c4bd038f94d1b5a614 100644
--- a/templates/gitlab-ci-sonar.yml
+++ b/templates/gitlab-ci-sonar.yml
@@ -276,7 +276,7 @@ sonar:
     entrypoint: [""]
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "sonar", "3.3.0" ]
+      command: ["--service", "sonar", "4.0.0" ]
   variables:
     # see: https://docs.sonarqube.org/latest/analysis/gitlab-integration/#header-4
     SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar" # Defines the location of the analysis task cache