diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5c14111d..47572f99 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,38 @@
 # Changelog
 
+## [10.1.3](https://github.com/miracum/recruit/compare/v10.1.2...v10.1.3) (2023-06-26)
+
+
+### Documentation
+
+* updated kyverno sample policy ([b078ba8](https://github.com/miracum/recruit/commit/b078ba8c975ddaff6ba7d294ea2215a6a09b3743))
+
+
+### CI/CD
+
+* fix check links workflow ([#109](https://github.com/miracum/recruit/issues/109)) ([700f14a](https://github.com/miracum/recruit/commit/700f14ab3ebb9362474865f67d8aa16225aecc13))
+* push kyverno policies to ghcr.io registry (experimental) ([#116](https://github.com/miracum/recruit/issues/116)) ([0c227cd](https://github.com/miracum/recruit/commit/0c227cde7c5767bb530dc35872a558bd625f439a))
+
+
+### Miscellaneous Chores
+
+* **deps:** fix pip lockfile refresh ([#128](https://github.com/miracum/recruit/issues/128)) ([21380a8](https://github.com/miracum/recruit/commit/21380a85c6d6c672024f901410159707029f0377))
+* **deps:** fixed dependency updates ([#127](https://github.com/miracum/recruit/issues/127)) ([386ad7f](https://github.com/miracum/recruit/commit/386ad7f932c01fdd6d4010711172d5fb25bae9b0))
+* **deps:** refresh pip-compile outputs ([#106](https://github.com/miracum/recruit/issues/106)) ([5ac8d9a](https://github.com/miracum/recruit/commit/5ac8d9abdbb53bc665facc7ecad21082813aef4e))
+* **deps:** refresh pip-compile outputs ([#115](https://github.com/miracum/recruit/issues/115)) ([ffe4949](https://github.com/miracum/recruit/commit/ffe49490ed5aa5d8ad39058d662ec97e53e3aa4d))
+* **deps:** update container-images ([#113](https://github.com/miracum/recruit/issues/113)) ([628e73d](https://github.com/miracum/recruit/commit/628e73d528a50182d975e50a6dfa487dde653969))
+* **deps:** update container-images ([#120](https://github.com/miracum/recruit/issues/120)) ([7d3f0d8](https://github.com/miracum/recruit/commit/7d3f0d89241ad911d5ce0e7789cd20397279aa46))
+* **deps:** update dependency requests to v2.31.0 [security] ([#117](https://github.com/miracum/recruit/issues/117)) ([5a8f113](https://github.com/miracum/recruit/commit/5a8f1137538b47a0dfd79e4ff530517340c7600f))
+* **deps:** update github-actions ([#112](https://github.com/miracum/recruit/issues/112)) ([9e6d17b](https://github.com/miracum/recruit/commit/9e6d17b3aa5724cc2e646c53ad88ad4f20f1bb06))
+* **deps:** update github-actions ([#121](https://github.com/miracum/recruit/issues/121)) ([fd4de81](https://github.com/miracum/recruit/commit/fd4de81ce571d49f786ed4d8a0f6d879fce002bc))
+* **deps:** update ohdsi docker tag to v0.21.6 ([#119](https://github.com/miracum/recruit/issues/119)) ([43be812](https://github.com/miracum/recruit/commit/43be812c96d89f8d7253c6b4870e01ef0d95f3ac))
+* **deps:** updated camel to v4 for Spring Boot v3 support ([8b9a2a3](https://github.com/miracum/recruit/commit/8b9a2a3084a9ced32034ffebdbd8dc727174539d))
+* **deps:** updated keycloak from v15 to v21 ([#111](https://github.com/miracum/recruit/issues/111)) ([2f98064](https://github.com/miracum/recruit/commit/2f98064cf28f4b0f27c791212a630d7afd43e40f))
+* **deps:** updated spring boot to 3.0.6 ([8b9a2a3](https://github.com/miracum/recruit/commit/8b9a2a3084a9ced32034ffebdbd8dc727174539d))
+* **deps:** updated spring boot to 3.0.6 ([#107](https://github.com/miracum/recruit/issues/107)) ([8b9a2a3](https://github.com/miracum/recruit/commit/8b9a2a3084a9ced32034ffebdbd8dc727174539d))
+* possibly fixed renovate updates for fhir packages and also fixed AVD-DS-0002 ([#123](https://github.com/miracum/recruit/issues/123)) ([56573ed](https://github.com/miracum/recruit/commit/56573ed3bf6ebc8e2867c689c0c283dc01bdb8e9))
+* updated sub-charts to use OCI registries where available ([#124](https://github.com/miracum/recruit/issues/124)) ([560baf0](https://github.com/miracum/recruit/commit/560baf0d9ca4cf75de0c64c2b25a94d9e5265374))
+
 ## [10.1.2](https://github.com/miracum/recruit/compare/v10.1.1...v10.1.2) (2023-04-10)
 
 
diff --git a/charts/recruit/Chart.yaml b/charts/recruit/Chart.yaml
index 7120d0d6..50d48030 100644
--- a/charts/recruit/Chart.yaml
+++ b/charts/recruit/Chart.yaml
@@ -40,8 +40,8 @@ dependencies:
     version: 0.4.3
     repository: oci://ghcr.io/miracum/charts
 # x-release-please-start-version
-version: 10.1.2
-appVersion: 10.1.2
+version: 10.1.3
+appVersion: 10.1.3
 # x-release-please-end
 annotations:
   artifacthub.io/containsSecurityUpdates: "false"
@@ -71,6 +71,6 @@ annotations:
   #     comment so the `reset-chart-changelog-annotations.yaml` correctly keeps that entry in place.
   artifacthub.io/changes: |-
     - kind: changed
-      description: updated recruIT image tags to v10.1.2 # x-release-please-version
+      description: updated recruIT image tags to v10.1.3 # x-release-please-version
     - kind: changed
       description: updated HAPI FHIR sub-chart to 0.12.0
diff --git a/charts/recruit/values.yaml b/charts/recruit/values.yaml
index 0e1ce577..ae3c44cc 100644
--- a/charts/recruit/values.yaml
+++ b/charts/recruit/values.yaml
@@ -154,7 +154,7 @@ query:
   image: # +doc-gen:ignore
     registry: ghcr.io
     repository: miracum/recruit/query
-    tag: v10.1.2 # x-release-please-version
+    tag: v10.1.3 # x-release-please-version
     pullPolicy: IfNotPresent
 
   metrics:
@@ -312,7 +312,7 @@ notify:
   image: # +doc-gen:ignore
     registry: ghcr.io
     repository: miracum/recruit/notify
-    tag: v10.1.2 # x-release-please-version
+    tag: v10.1.3 # x-release-please-version
     pullPolicy: IfNotPresent
 
   metrics:
@@ -492,7 +492,7 @@ list:
   image: # +doc-gen:ignore
     registry: ghcr.io
     repository: miracum/recruit/list
-    tag: v10.1.2 # x-release-please-version
+    tag: v10.1.3 # x-release-please-version
     pullPolicy: IfNotPresent
 
   # -- the service used to expose the list module web port
diff --git a/docker-compose/docker-compose.yaml b/docker-compose/docker-compose.yaml
index 48a495d3..03e8662b 100644
--- a/docker-compose/docker-compose.yaml
+++ b/docker-compose/docker-compose.yaml
@@ -1,6 +1,6 @@
 services:
   list:
-    image: ${RECRUIT_IMAGE_BASE_NAME:-ghcr.io/miracum/recruit}/list:${RECRUIT_IMAGE_TAG:-v10.1.2} # x-release-please-version
+    image: ${RECRUIT_IMAGE_BASE_NAME:-ghcr.io/miracum/recruit}/list:${RECRUIT_IMAGE_TAG:-v10.1.3} # x-release-please-version
     restart: unless-stopped
     ipc: none
     security_opt:
@@ -31,7 +31,7 @@ services:
       - ${NOTIFY_RULES_CONFIG_PATH:?}:/etc/rules.yaml:ro
 
   query:
-    image: ${RECRUIT_IMAGE_BASE_NAME:-ghcr.io/miracum/recruit}/query:${RECRUIT_IMAGE_TAG:-v10.1.2} # x-release-please-version
+    image: ${RECRUIT_IMAGE_BASE_NAME:-ghcr.io/miracum/recruit}/query:${RECRUIT_IMAGE_TAG:-v10.1.3} # x-release-please-version
     restart: unless-stopped
     ipc: none
     security_opt:
@@ -69,7 +69,7 @@ services:
           size: 1024
 
   notify:
-    image: ${RECRUIT_IMAGE_BASE_NAME:-ghcr.io/miracum/recruit}/notify:${RECRUIT_IMAGE_TAG:-v10.1.2} # x-release-please-version
+    image: ${RECRUIT_IMAGE_BASE_NAME:-ghcr.io/miracum/recruit}/notify:${RECRUIT_IMAGE_TAG:-v10.1.3} # x-release-please-version
     restart: unless-stopped
     ipc: none
     security_opt:
diff --git a/docs/_snippets/k8s/query-argo-workflow.yaml b/docs/_snippets/k8s/query-argo-workflow.yaml
index 225f1deb..30895116 100644
--- a/docs/_snippets/k8s/query-argo-workflow.yaml
+++ b/docs/_snippets/k8s/query-argo-workflow.yaml
@@ -75,7 +75,7 @@ spec:
 
     - name: recruit-query
       container:
-        image: ghcr.io/miracum/recruit/query:v10.1.2 # x-release-please-version
+        image: ghcr.io/miracum/recruit/query:v10.1.3 # x-release-please-version
         env:
           - name: QUERY_RUN_ONCE_AND_EXIT
             value: "true"
diff --git a/docs/configuration/security.md b/docs/configuration/security.md
index 90c688c9..b928418a 100644
--- a/docs/configuration/security.md
+++ b/docs/configuration/security.md
@@ -72,7 +72,7 @@ All released images are signed via [cosign](https://github.com/sigstore/cosign).
 
 <!-- x-release-please-start-version -->
 ```sh
-cosign verify -key recruit-image-signing.pub ghcr.io/miracum/recruit/list:v10.1.2
+cosign verify -key recruit-image-signing.pub ghcr.io/miracum/recruit/list:v10.1.3
 ```
 <!-- x-release-please-end -->
 
diff --git a/src/buildSrc/src/main/groovy/org.miracum.recruit.java-common-conventions.gradle b/src/buildSrc/src/main/groovy/org.miracum.recruit.java-common-conventions.gradle
index 4f99244a..a14c99b0 100644
--- a/src/buildSrc/src/main/groovy/org.miracum.recruit.java-common-conventions.gradle
+++ b/src/buildSrc/src/main/groovy/org.miracum.recruit.java-common-conventions.gradle
@@ -10,7 +10,7 @@ plugins {
 }
 
 group = 'org.miracum.recruit'
-version = '10.1.2' // x-release-please-version
+version = '10.1.3' // x-release-please-version
 sourceCompatibility = '17'
 targetCompatibility = '17'
 
diff --git a/src/list/Dockerfile b/src/list/Dockerfile
index 4a8883fc..faba0871 100644
--- a/src/list/Dockerfile
+++ b/src/list/Dockerfile
@@ -11,7 +11,7 @@ RUN npm clean-install --workspace=frontend
 
 COPY frontend/ ./frontend/
 
-ARG VERSION=v10.1.2 # x-release-please-version
+ARG VERSION=v10.1.3 # x-release-please-version
 ENV VUE_APP_VERSION=${VERSION} \
     NODE_ENV=production
 
diff --git a/src/notify/src/main/resources/application.yml b/src/notify/src/main/resources/application.yml
index 9555710c..e7dd555e 100644
--- a/src/notify/src/main/resources/application.yml
+++ b/src/notify/src/main/resources/application.yml
@@ -1,5 +1,5 @@
 notify:
-  version: "10.1.2" # x-release-please-version
+  version: "10.1.3" # x-release-please-version
   retry:
     backoffPeriodMs: 30000
     maxAttempts: 10
diff --git a/src/query/src/main/resources/application.yml b/src/query/src/main/resources/application.yml
index a179702c..a86fba8c 100644
--- a/src/query/src/main/resources/application.yml
+++ b/src/query/src/main/resources/application.yml
@@ -1,5 +1,5 @@
 query:
-  version: "10.1.2" # x-release-please-version
+  version: "10.1.3" # x-release-please-version
   cohortSizeThreshold: 100
   schedule:
     enable: true
diff --git a/version.txt b/version.txt
index b6132546..c8d7efca 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-10.1.2
+10.1.3