diff --git a/CHANGELOG.md b/CHANGELOG.md
index c0fb3cdbda..254301c4b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 ## [UNRELEASED]
 
 - Dependency caching should now cache more dependencies for Java `build-mode: none` extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
+- Update default CodeQL bundle version to 2.20.7. [#2810](https://github.com/github/codeql-action/pull/2810)
 
 ## 3.28.11 - 07 Mar 2025
 
diff --git a/lib/defaults.json b/lib/defaults.json
index db9c2a27c5..6473524ce6 100644
--- a/lib/defaults.json
+++ b/lib/defaults.json
@@ -1,6 +1,6 @@
 {
-    "bundleVersion": "codeql-bundle-v2.20.6",
-    "cliVersion": "2.20.6",
-    "priorBundleVersion": "codeql-bundle-v2.20.5",
-    "priorCliVersion": "2.20.5"
+    "bundleVersion": "codeql-bundle-v2.20.7",
+    "cliVersion": "2.20.7",
+    "priorBundleVersion": "codeql-bundle-v2.20.6",
+    "priorCliVersion": "2.20.6"
 }
diff --git a/src/defaults.json b/src/defaults.json
index df95e81144..13392d33ae 100644
--- a/src/defaults.json
+++ b/src/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.20.6",
-  "cliVersion": "2.20.6",
-  "priorBundleVersion": "codeql-bundle-v2.20.5",
-  "priorCliVersion": "2.20.5"
+  "bundleVersion": "codeql-bundle-v2.20.7",
+  "cliVersion": "2.20.7",
+  "priorBundleVersion": "codeql-bundle-v2.20.6",
+  "priorCliVersion": "2.20.6"
 }