diff --git a/CHANGELOG.md b/CHANGELOG.md
index d3658c3742f9ba0c96322dbd857a5c2d8c261274..38da73e1ca3de0492bd61790e5e561ed8724bb3e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [3.3.1](https://gitlab.com/to-be-continuous/helmfile/compare/3.3.0...3.3.1) (2025-02-01)
+
+
+### Bug Fixes
+
+* homogenize new TBC envsubst mechanism ([74533ac](https://gitlab.com/to-be-continuous/helmfile/commit/74533acb50e88eaeabf62a3f500c4ef60c8f2df5))
+
 # [3.3.0](https://gitlab.com/to-be-continuous/helmfile/compare/3.2.4...3.3.0) (2025-01-27)
 
 
diff --git a/README.md b/README.md
index 378f0dca6deeaf52d04750764a46b74e4dbf09b5..829e87060e286477d98226c39b978cb4e7a2193a 100644
--- a/README.md
+++ b/README.md
@@ -15,7 +15,7 @@ Add the following to your `.gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: $CI_SERVER_FQDN/to-be-continuous/helmfile/gitlab-ci-helmfile@3.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/helmfile/gitlab-ci-helmfile@3.3.1
     # 2: set/override component inputs
     inputs:
       # ⚠ this is only an example
@@ -33,7 +33,7 @@ Add the following to your `.gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/helmfile'
-    ref: '3.3.0'
+    ref: '3.3.1'
     file: '/templates/gitlab-ci-helmfile.yml'
 
 variables:
@@ -425,9 +425,9 @@ With:
 ```yaml
 include:
   # main template
-  - component: $CI_SERVER_FQDN/to-be-continuous/helmfile/gitlab-ci-helmfile@3.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/helmfile/gitlab-ci-helmfile@3.3.1
   # Vault variant
-  - component: $CI_SERVER_FQDN/to-be-continuous/helmfile/gitlab-ci-helmfile-vault@3.3.0
+  - component: $CI_SERVER_FQDN/to-be-continuous/helmfile/gitlab-ci-helmfile-vault@3.3.1
     inputs:
       # audience claim for JWT
       vault-oidc-aud: "https://vault.acme.host"
diff --git a/templates/gitlab-ci-helmfile-vault.yml b/templates/gitlab-ci-helmfile-vault.yml
index 64f12a6f20e4f38137db7c483f4529e8c5c82a46..e6bb722a69278810d205f9a4c9e13e34a2de70b8 100644
--- a/templates/gitlab-ci-helmfile-vault.yml
+++ b/templates/gitlab-ci-helmfile-vault.yml
@@ -23,7 +23,7 @@ variables:
 .helmfile-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "helmfile", "3.3.0"]
+      command: ["--service", "helmfile", "3.3.1"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-helmfile.yml b/templates/gitlab-ci-helmfile.yml
index 8ae85bb18e782717b6720f0833c365a3c31ff406..0f1e64d35a36286ecf17ee7e268872f4fedf7109 100644
--- a/templates/gitlab-ci-helmfile.yml
+++ b/templates/gitlab-ci-helmfile.yml
@@ -725,7 +725,7 @@ stages:
     entrypoint: [""]
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "helmfile", "3.3.0"]
+      command: ["--service", "helmfile", "3.3.1"]
   variables:
     HELM_CACHE_HOME: $CI_PROJECT_DIR/.cache/helm
     HELM_CONFIG_HOME: $CI_PROJECT_DIR/.config/helm