diff --git a/traefikee/Changelog.md b/traefikee/Changelog.md
index efa2213..59df824 100644
--- a/traefikee/Changelog.md
+++ b/traefikee/Changelog.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 3.3.1  ![AppVersion: v2.10.9](https://img.shields.io/static/v1?label=AppVersion&message=v2.10.9&color=success&logo=) ![Kubernetes: >= 1.26.0-0](https://img.shields.io/static/v1?label=Kubernetes&message=%3E%3D+1.26.0-0&color=informational&logo=kubernetes) ![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm)
+
+**Release date:** 2024-02-15
+
+* chore(release): publish v3.3.1
+* chore(deps): update docker.io/traefik/traefikee docker tag to v2.10.9
+
+
 ## 3.3.0  ![AppVersion: v2.10.8](https://img.shields.io/static/v1?label=AppVersion&message=v2.10.8&color=success&logo=) ![Kubernetes: >= 1.26.0-0](https://img.shields.io/static/v1?label=Kubernetes&message=%3E%3D+1.26.0-0&color=informational&logo=kubernetes) ![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm)
 
 **Release date:** 2024-02-12
@@ -44,13 +52,13 @@ index 296aa7d..22a5737 100644
 +  loadBalancerClass:
 +  loadBalancerIP:
 +  loadBalancerSourceRanges:
-
+ 
    # To disable affinity at all set this value to null
    affinity:
 @@ -306,6 +319,27 @@ proxy:
  #      maxUnavailable: 0
  #      maxSurge: 1
-
+ 
 +## Create an IngressRoute for the dashboard
 +ingressRoute:
 +  dashboard:
@@ -78,7 +86,7 @@ index 296aa7d..22a5737 100644
 @@ -313,6 +347,22 @@ additionalProxies: {}
  # priorityClassName will be set on all pods.
  priorityClassName: ""
-
+ 
 +# -- TLS Options are created as TLSOption CRDs
 +# https://doc.traefik.io/traefik/https/tls/#tls-options
 +# When using `labelSelector`, you'll need to set labels on tlsOption accordingly.
@@ -144,14 +152,14 @@ index 8608fac..28862c2 100644
 @@ -306,6 +306,10 @@ proxy:
  #      maxUnavailable: 0
  #      maxSurge: 1
-
+ 
 +# Optional additional proxy deployement
 +# See values-dual-proxies.yaml for an example
 +additionalProxies: {}
 +
  # priorityClassName will be set on all pods.
  priorityClassName: ""
-
+ 
 @@ -321,3 +325,8 @@ mesh:
  #    foo: bar
  #  podAnnotations:
@@ -181,7 +189,7 @@ index 07b4125..8608fac 100644
 @@ -17,6 +17,13 @@ initImage:
    repository: busybox
    tag: "1.36.1"
-
+ 
 +# -- To create a default IngressClass for TraefikEE, set `enabled: true` below:
 +# It should also be set on k8s providers in static configuration
 +ingressClass:
@@ -200,7 +208,7 @@ index 07b4125..8608fac 100644
          kubernetesCRD:
            allowEmptyServices: true
 +          ingressClass:
-
+ 
  #  serviceLabels:
  #    foo: bar
 ```
@@ -256,7 +264,7 @@ index 34b537a..07b4125 100644
      periodSeconds: 5
 +  securityContext:
 +    runAsUser: 65532
-
+ 
  #  serviceLabels:
  #    foo: bar
 ```
@@ -291,7 +299,7 @@ index 68e2a9e..34b537a 100644
 +++ b/traefikee/values.yaml
 @@ -5,13 +5,17 @@ cluster: "default"
  #   - name: regcred
-
+ 
  image:
 -  name: traefik/traefikee
 +  registry: docker.io
@@ -308,12 +316,12 @@ index 68e2a9e..34b537a 100644
 +  registry: docker.io
 +  repository: busybox
 +  tag: "1.36.1"
-
+ 
  # log:
  #  level: DEBUG
 @@ -19,6 +23,8 @@ image:
  #  file:
-
+ 
  registry:
 +  # When disabled, plugins cannot be used
 +  enabled: true
@@ -365,7 +373,7 @@ index 68e2a9e..34b537a 100644
 +#      whenUnsatisfiable: DoNotSchedule
  ## Tolerations allow the scheduler to schedule pods with matching taints.
    tolerations: []
-
+ 
 @@ -134,12 +167,19 @@ proxy:
      limits:
        cpu: "1000m"
@@ -386,7 +394,7 @@ index 68e2a9e..34b537a 100644
 +      targetPort: https
  # # Specify Static IP of cloud provider LB
  #  loadBalancerIP: "1.2.3.4"
-
+ 
 @@ -164,11 +204,47 @@ proxy:
                    values:
                      - proxies
@@ -460,7 +468,7 @@ index 0b939a6..68e2a9e 100644
 +++ b/traefikee/values.yaml
 @@ -124,6 +124,8 @@ controller:
    tolerations: []
-
+ 
  proxy:
 +  # Can be set to null when using HPA, in order to avoid conflict between HPA
 +  # and this Chart on replicas.
@@ -477,7 +485,7 @@ index 0b939a6..68e2a9e 100644
 +#    rollingUpdate:
 +#      maxUnavailable: 0
 +#      maxSurge: 1
-
+ 
  # priorityClassName will be set on all pods.
  priorityClassName: ""
 ```
@@ -515,8 +523,8 @@ index eb83307..0b939a6 100644
  #  tokenSecret: "NJ00yx60K+Wm1yufuBM6fLq3fVKcv44RvBsVGiH40+U="
 +## Tolerations allow the scheduler to schedule pods with matching taints.
 +  tolerations: []
-
-
+ 
+ 
  controller:
 @@ -118,6 +120,8 @@ controller:
  #        secretKeyRef:
@@ -524,7 +532,7 @@ index eb83307..0b939a6 100644
  #          key: BAR
 +## Tolerations allow the scheduler to schedule pods with matching taints.
 +  tolerations: []
-
+ 
  proxy:
    replicas: 2
 @@ -200,6 +204,8 @@ proxy:
@@ -533,7 +541,7 @@ index eb83307..0b939a6 100644
  #      whenUnsatisfiable: DoNotSchedule
 +## Tolerations allow the scheduler to schedule pods with matching taints.
 +  tolerations: []
-
+ 
  # priorityClassName will be set on all pods.
  priorityClassName: ""
 ```
@@ -557,7 +565,7 @@ index 26cd9f5..eb83307 100644
        port: 443
 +# # Specify Static IP of cloud provider LB
 +#  loadBalancerIP: "1.2.3.4"
-
+ 
    # To disable affinity at all set this value to null
    affinity:
 ```
@@ -589,7 +597,7 @@ index d9be1d1..26cd9f5 100644
 +#      maxSkew: 1
 +#      topologyKey: kubernetes.io/hostname
 +#      whenUnsatisfiable: DoNotSchedule
-
+ 
  # priorityClassName will be set on all pods.
  priorityClassName: ""
 ```
@@ -616,7 +624,7 @@ index 382108b..d9be1d1 100644
 --- a/traefikee/values.yaml
 +++ b/traefikee/values.yaml
 @@ -63,6 +63,14 @@ registry:
-
+ 
  controller:
    replicas: 1
 +  resources:
@@ -631,7 +639,7 @@ index 382108b..d9be1d1 100644
    affinity:
      nodeAffinity:
 @@ -113,6 +121,13 @@ controller:
-
+ 
  proxy:
    replicas: 2
 +  resources:
@@ -647,7 +655,7 @@ index 382108b..d9be1d1 100644
 @@ -174,6 +189,9 @@ proxy:
  #    maxUnavailable: 1
  # terminationGracePeriodSeconds: 30
-
+ 
 +# priorityClassName will be set on all pods.
 +priorityClassName: ""
 +
@@ -697,7 +705,7 @@ index de3f006..382108b 100644
 +## Set the registry token directly in Values
 +#  tokenSecret: "NJ00yx60K+Wm1yufuBM6fLq3fVKcv44RvBsVGiH40+U="
 +
-
+ 
  controller:
    replicas: 1
 ```
@@ -718,7 +726,7 @@ index 9ea43c5..de3f006 100644
 @@ -18,7 +18,29 @@ image:
  #  format:
  #  file:
-
+ 
 -# registry:
 +registry:
 +  # To disable affinity at all set this value to null
@@ -747,7 +755,7 @@ index 9ea43c5..de3f006 100644
  #     foo: bar
  #   serviceAnnotations:
 @@ -35,6 +57,27 @@ image:
-
+ 
  controller:
    replicas: 1
 +  # To disable affinity at all set this value to null
@@ -823,7 +831,7 @@ index 26169fd..9ea43c5 100644
  #    minAvailable: 1
  #    maxUnavailable: 1
 +# terminationGracePeriodSeconds: 30
-
+ 
  mesh:
    enabled: false
 ```
@@ -855,7 +863,7 @@ index 636d86b..26169fd 100644
 +  initContainer:
 +    name: busybox
 +    tag: "1.31.1"
-
+ 
  # log:
  #  level: DEBUG
 ```
@@ -902,7 +910,7 @@ index bc72689..636d86b 100644
 +#  podDisruptionBudget:
 +#    minAvailable: 1
 +#    maxUnavailable: 1
-
+ 
  mesh:
    enabled: false
 ```
@@ -923,7 +931,7 @@ index 7f0493f..bc72689 100644
 @@ -1,6 +1,9 @@
  # Default values for Traefik Enterprise
  cluster: "default"
-
+ 
 +# imagePullSecrets:
 +#   - name: regcred
 +
@@ -964,7 +972,7 @@ index 04e81c7..7f0493f 100644
 +#        secretKeyRef:
 +#          name: foo
 +#          key: BAR
-
+ 
  proxy:
    replicas: 2
 @@ -78,7 +84,13 @@ proxy:
@@ -979,7 +987,7 @@ index 04e81c7..7f0493f 100644
 +#        secretKeyRef:
 +#          name: foo
 +#          key: BAR
-
+ 
  mesh:
    enabled: false
 ```
@@ -1003,7 +1011,7 @@ index 8cf39b4..04e81c7 100644
  #    - --foo=bar
 +#  env:
 +#    foo: bar
-
+ 
  proxy:
    replicas: 2
 @@ -75,6 +77,8 @@ proxy:
@@ -1012,7 +1020,7 @@ index 8cf39b4..04e81c7 100644
  #    - --foo=bar
 +#  env:
 +#    foo: bar
-
+ 
  mesh:
    enabled: false
 ```
@@ -1117,7 +1125,7 @@ index a16de7f..8cf39b4 100644
 @@ -1,27 +1,90 @@
  # Default values for Traefik Enterprise
  cluster: "default"
-
+ 
 -registry:
 -  token: ""
 +image:
@@ -1125,7 +1133,7 @@ index a16de7f..8cf39b4 100644
 +  # defaults to appVersion
 +  tag: ""
 +  pullPolicy: IfNotPresent
-
+ 
 -proxy:
 -  image:
 -    name: traefik/traefikee
@@ -1204,7 +1212,7 @@ index a16de7f..8cf39b4 100644
 +#    foo: bar
 +#  additionalArguments:
 +#    - --foo=bar
-
+ 
  mesh:
    enabled: false
    kubedns: false
@@ -1256,7 +1264,7 @@ index 1e61b18..a16de7f 100644
 @@ -1,6 +1,9 @@
  # Default values for Traefik Enterprise
  cluster: "default"
-
+ 
 +registry:
 +  token: ""
 +
@@ -1338,7 +1346,7 @@ index 0ba2f26..1e61b18 100644
    proxies: 2
    controllers: 1
    staticConfig:
--#    configMap:
+-#    configMap: 
 +#    configMap:
  #    configMapKey: "static.yaml"
    ports:
@@ -1366,7 +1374,7 @@ proxy:
   proxies: 2
   controllers: 1
   staticConfig:
-#    configMap:
+#    configMap: 
 #    configMapKey: "static.yaml"
   ports:
     - name: http
diff --git a/traefikee/Chart.yaml b/traefikee/Chart.yaml
index 4c14809..f762204 100644
--- a/traefikee/Chart.yaml
+++ b/traefikee/Chart.yaml
@@ -8,7 +8,7 @@ icon: https://doc.traefik.io/traefik-enterprise/assets/images/logo-traefik-enter
 # Because of https://github.com/helm/helm/issues/3810 the pre-release version suffix has to be define.
 # This allows the installation on Kubernetes cluster with a pre-release version (e.g. v1.19.9-gke.1900)
 kubeVersion: ">= 1.26.0-0"
-version: 3.3.0
+version: 3.3.1
 # renovate: image=docker.io/traefik/traefikee
 appVersion: v2.10.9
 type: application
@@ -25,7 +25,5 @@ keywords:
   - traefik-enterprise
 annotations:
   artifacthub.io/changes: |
-    - "feat: dashboard ingressroute"
-    - "feat: add missing Service spec fields"
-    - "feat: TLSOption"
-    - "chore(release): publish v3.3.0"
+    - "chore(release): publish v3.3.1"
+    - "chore(deps): update docker.io/traefik/traefikee docker tag to v2.10.9"