diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index a06330f7..6b782b50 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -60,7 +60,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.35.3
+      uses: github/codeql-action/init@v4.35.4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -88,6 +88,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.35.3
+      uses: github/codeql-action/analyze@v4.35.4
       with:
         category: "/language:${{matrix.language}}"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8fd94feb..bf465952 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 
 ---
+## [0.1.31] - 2026-05-14
+### Changed
+- Bump github/codeql-action from 4.35.3 to 4.35.4
+
 ## [0.1.30] - 2026-05-13
 ### Changed
 - Pinned `rhysd/actionlint` to `v1.7.12` in static checks and updated workflow shell quoting in Go coverage CI for actionlint compatibility.
diff --git a/bsctl/static/resources/constants.yaml b/bsctl/static/resources/constants.yaml
index b0d6a56d..c9f5850b 100644
--- a/bsctl/static/resources/constants.yaml
+++ b/bsctl/static/resources/constants.yaml
@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - constant for semantic versioning
-BasicSetupCliVersion: "0.1.30"
+BasicSetupCliVersion: "0.1.31"
diff --git a/resources/version.yaml b/resources/version.yaml
index 2db858b3..306a1e65 100644
--- a/resources/version.yaml
+++ b/resources/version.yaml
@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - primary version source for releases and docs bump automation
-BasicSetupCliVersion: "0.1.30"
+BasicSetupCliVersion: "0.1.31"