diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e5b1fc5b..384f0b26 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -38,7 +38,7 @@ jobs:
           # install` here failed on every scheduled run since at least
           # 2026-06-22, so JS/TS CodeQL analysis was silently not running.
           # CodeQL is cron-only, so no PR ever surfaced it.
-          version: "11.17.0"
+          version: "11.18.0"
 
       - name: Setup Node.js
         if: matrix.language == 'javascript-typescript'