diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 5557fdfb..a06330f7 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -60,7 +60,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.35.2
+      uses: github/codeql-action/init@v4.35.3
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -88,6 +88,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.35.2
+      uses: github/codeql-action/analyze@v4.35.3
       with:
         category: "/language:${{matrix.language}}"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2011b4f4..4df09d73 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 
 ---
+## [0.1.28] - 2026-05-08
+### Changed
+- Bump github/codeql-action from 4.35.2 to 4.35.3
+
 ## [0.1.27] - 2026-05-06
 ### Changed
 - Bump actions/labeler from 6 to 6.0.1
diff --git a/bsctl/static/resources/constants.yaml b/bsctl/static/resources/constants.yaml
index 281c6793..7fd03557 100644
--- a/bsctl/static/resources/constants.yaml
+++ b/bsctl/static/resources/constants.yaml
@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - constant for semantic versioning
-BasicSetupCliVersion: "0.1.27"
+BasicSetupCliVersion: "0.1.28"
diff --git a/resources/version.yaml b/resources/version.yaml
index 4162bd74..abb0bf11 100644
--- a/resources/version.yaml
+++ b/resources/version.yaml
@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - primary version source for releases and docs bump automation
-BasicSetupCliVersion: "0.1.27"
+BasicSetupCliVersion: "0.1.28"