diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 471d747..44eefd1 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -39,7 +39,7 @@ jobs:
       - uses: mozilla-actions/sccache-action@v0.0.11
       - name: Run cargo fmt
         run: cargo fmt --all -- --check
-      - uses: stellar/stellar-cli@v26.0.0
+      - uses: stellar/stellar-cli@v28.0.0
       - name: build since clippy needs contracts to be built
         run: just build
       - name: Run cargo clippy
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 29a8f0c..2733f11 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -34,7 +34,7 @@ jobs:
       - uses: taiki-e/install-action@just
       - uses: taiki-e/install-action@nextest
       - uses: cargo-bins/cargo-binstall@main
-      - uses: stellar/stellar-cli@v26.0.0
+      - uses: stellar/stellar-cli@v28.0.0
       - uses: mozilla-actions/sccache-action@v0.0.11
 
       # Integration tests load registry.wasm + hello_v1/v2.wasm from
@@ -103,7 +103,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: taiki-e/install-action@just
       - uses: taiki-e/install-action@nextest
-      - uses: stellar/stellar-cli@v27.0.0
+      - uses: stellar/stellar-cli@v28.0.0
       # Start the local network through the CLI at the protocol the stellar-cli
       # pin targets. Without an explicit protocol, quickstart's local network
       # arms its baked-in default (p25) and p27 contracts fail transaction