diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1c11844ad9..47ce418a08 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 
 - On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. [#4124](https://github.com/github/codeql-action/pull/4124)
 - The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native `linux-arm64` CodeQL bundle when available. [#4072](https://github.com/github/codeql-action/pull/4072)
+- Update default CodeQL bundle version to [2.27.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0). [#4129](https://github.com/github/codeql-action/pull/4129)
 
 ## 4.37.9 - 26 Aug 2026
 
diff --git a/lib/defaults.json b/lib/defaults.json
index 1098ef4593..e4875a8a34 100644
--- a/lib/defaults.json
+++ b/lib/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.26.4",
-  "cliVersion": "2.26.4",
-  "priorBundleVersion": "codeql-bundle-v2.26.3",
-  "priorCliVersion": "2.26.3"
+  "bundleVersion": "codeql-bundle-v2.27.0",
+  "cliVersion": "2.27.0",
+  "priorBundleVersion": "codeql-bundle-v2.26.4",
+  "priorCliVersion": "2.26.4"
 }
diff --git a/lib/entry-points.js b/lib/entry-points.js
index 937eb090e2..c87e743b40 100644
--- a/lib/entry-points.js
+++ b/lib/entry-points.js
@@ -146177,7 +146177,7 @@ function getDiffRangesJsonFilePath(env = getEnv()) {
   return path2.join(getTemporaryDirectory(env), PR_DIFF_RANGE_JSON_FILENAME);
 }
 function getActionVersion() {
-  return "4.37.10";
+  return "4.38.0";
 }
 function getWorkflowEventName(env = getEnv()) {
   return env.getRequired("GITHUB_EVENT_NAME" /* GITHUB_EVENT_NAME */);
@@ -147742,8 +147742,8 @@ var path6 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.26.4";
-var cliVersion = "2.26.4";
+var bundleVersion = "codeql-bundle-v2.27.0";
+var cliVersion = "2.27.0";
 
 // src/overlay/index.ts
 var fs5 = __toESM(require("fs"));
diff --git a/package-lock.json b/package-lock.json
index da14fd0ed6..168f4111b9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "codeql",
-  "version": "4.37.10",
+  "version": "4.38.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codeql",
-      "version": "4.37.10",
+      "version": "4.38.0",
       "license": "MIT",
       "workspaces": [
         "pr-checks",
diff --git a/package.json b/package.json
index 0e8fc4bb2a..fb09a0ca31 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "4.37.10",
+  "version": "4.38.0",
   "private": true,
   "description": "CodeQL action",
   "scripts": {
diff --git a/src/defaults.json b/src/defaults.json
index 1098ef4593..e4875a8a34 100644
--- a/src/defaults.json
+++ b/src/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.26.4",
-  "cliVersion": "2.26.4",
-  "priorBundleVersion": "codeql-bundle-v2.26.3",
-  "priorCliVersion": "2.26.3"
+  "bundleVersion": "codeql-bundle-v2.27.0",
+  "cliVersion": "2.27.0",
+  "priorBundleVersion": "codeql-bundle-v2.26.4",
+  "priorCliVersion": "2.26.4"
 }