diff --git a/CHANGELOG.md b/CHANGELOG.md
index 87e56dc1451f10d842b65dce74b6f49b4dec4799..4c897b22c9cbdba8590cf3f81e6ba09670b26be2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [4.2.2](https://gitlab.com/to-be-continuous/sonar/compare/4.2.1...4.2.2) (2024-04-03)
+
+
+### Bug Fixes
+
+* **vault:** use vault-secrets-provider's "latest" image tag ([44b9861](https://gitlab.com/to-be-continuous/sonar/commit/44b9861eec703a5f3f4c8dbbbbbf15a85cf75144))
+
 ## [4.2.1](https://gitlab.com/to-be-continuous/sonar/compare/4.2.0...4.2.1) (2024-1-30)
 
 
diff --git a/README.md b/README.md
index 830c973b4c0049ecdaef7c276674d2ffd1c5bc81..c28713978d710677daf5d689d72f4d7c426c8780 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,7 @@ Add the following to your `gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: gitlab.com/to-be-continuous/sonar/gitlab-ci-sonar@4.2.1
+  - component: gitlab.com/to-be-continuous/sonar/gitlab-ci-sonar@4.2.2
     # 2: set/override component inputs
     inputs:
       host-url: https://sonarqube.acme.host # âš  this is only an example
@@ -30,7 +30,7 @@ Add the following to your `gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/sonar'
-    ref: '4.2.1'
+    ref: '4.2.2'
     file: '/templates/gitlab-ci-sonar.yml'
 
 variables:
@@ -115,9 +115,9 @@ With:
 ```yaml
 include:
   # main template
-  - component: gitlab.com/to-be-continuous/sonar/gitlab-ci-sonar@4.2.1
+  - component: gitlab.com/to-be-continuous/sonar/gitlab-ci-sonar@4.2.2
   # Vault variant
-  - component: gitlab.com/to-be-continuous/sonar/gitlab-ci-sonar-vault@4.2.1
+  - component: gitlab.com/to-be-continuous/sonar/gitlab-ci-sonar-vault@4.2.2
     inputs:
        # audience claim for JWT
       vault-oidc-aud: "https://vault.acme.host"