diff --git a/CHANGELOG.md b/CHANGELOG.md
index b483c275b..a04f65021 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ### Changed
 - Modules outside the scan root can no longer be excluded with `--exclude-paths`; `**/x` used to match a `../x` module by accident. Single-root runs whose Maven or Gradle options relocate the build root (`-f`, `-p`) now match patterns relative to the current directory, as documented.
+- Updated the Coana CLI to v `15.14.1`.
 
 ### Fixed
 - `--exclude-paths` patterns are now matched relative to the scan root in every build root. They now also exclude modules a build reaches outside its own directory (Maven `../` modules, relocated Gradle projects) and modules matched by wildcards that span a build-root boundary, such as `*/core`.
diff --git a/src/constants.mts b/src/constants.mts
index a20fec4bb..23b5627ae 100644
--- a/src/constants.mts
+++ b/src/constants.mts
@@ -194,7 +194,7 @@ const ALERT_TYPE_MILD_CVE = 'mildCVE'
 const API_V0_URL = 'https://api.socket.dev/v0/'
 // The Coana CLI version Socket CLI runs by default. Coana's release workflow
 // rewrites this line in its bump PRs.
-const COANA_CLI_VERSION = '15.14.0'
+const COANA_CLI_VERSION = '15.14.1'
 const CONFIG_KEY_API_BASE_URL = 'apiBaseUrl'
 const CONFIG_KEY_API_PROXY = 'apiProxy'
 const CONFIG_KEY_API_TOKEN = 'apiToken'