diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 601277b6..0f35cb31 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
   "action": "1.0.0",
-  "rust": "0.2.27"
+  "rust": "0.2.28"
 }
diff --git a/rust/CHANGELOG.md b/rust/CHANGELOG.md
index 4846ea47..1d4abd4b 100644
--- a/rust/CHANGELOG.md
+++ b/rust/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## [0.2.28](https://github.com/godaddy/cli/compare/v0.2.27...v0.2.28) (2026-10-12)
+
+
+### Features
+
+* **auth:** request a product-area scope bundle at login, step up only for sensitive scopes ([#317](https://github.com/godaddy/cli/issues/317)) ([cea21f5](https://github.com/godaddy/cli/commit/cea21f57f054620f134674288f5a648aa9a54f28))
+* **auth:** upgrade cli-engine to 0.10.1; log in with an ephemeral callback port and OIDC scopes ([#314](https://github.com/godaddy/cli/issues/314)) ([b30e3a1](https://github.com/godaddy/cli/commit/b30e3a1d985b12e2f188249250d2fadf4eb14b94))
+
+
+### Bug Fixes
+
+* **deps:** update quinn-proto and chacha20 to clear security advisories ([#318](https://github.com/godaddy/cli/issues/318)) ([306c921](https://github.com/godaddy/cli/commit/306c9210ec9a32e9f11b7c8012d813d51ab8147f))
+
 ## [0.2.27](https://github.com/godaddy/cli/compare/v0.2.26...v0.2.27) (2026-10-12)
 
 
diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 3b232df0..692e476d 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -1025,7 +1025,7 @@ dependencies = [
 
 [[package]]
 name = "domains-client"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "bytes",
  "futures",
@@ -1070,7 +1070,7 @@ checksum = "9e5e8f6c15a24b9a3ee5efec809ccd006d3b30e8b3bb63c39af737c7f87daa1d"
 
 [[package]]
 name = "email-client"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "bytes",
  "futures",
@@ -1393,7 +1393,7 @@ dependencies = [
 
 [[package]]
 name = "generate-api-catalog"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "anyhow",
  "async-graphql-parser",
@@ -1410,7 +1410,7 @@ dependencies = [
 
 [[package]]
 name = "generated-client-support"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "http",
  "httpmock",
@@ -1485,7 +1485,7 @@ dependencies = [
 
 [[package]]
 name = "godaddy-cli"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "async-trait",
  "bytes",
@@ -1659,7 +1659,7 @@ dependencies = [
 
 [[package]]
 name = "hosting-client"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "bytes",
  "futures",
@@ -3911,7 +3911,7 @@ checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
 
 [[package]]
 name = "shopping-client"
-version = "0.2.27"
+version = "0.2.28"
 dependencies = [
  "bytes",
  "futures",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 57912083..a7ad91dd 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "godaddy-cli"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 description = "GoDaddy developer CLI"
 license = "Proprietary"
diff --git a/rust/domains-client/Cargo.toml b/rust/domains-client/Cargo.toml
index ac24d321..86ee001d 100644
--- a/rust/domains-client/Cargo.toml
+++ b/rust/domains-client/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "domains-client"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 license = "Proprietary"
 description = "Generated GoDaddy Domains API client (domains list + availability + suggest + DNS records), produced from the vendored OpenAPI 3.0 spec by progenitor at build time."
diff --git a/rust/email-client/Cargo.toml b/rust/email-client/Cargo.toml
index 82232963..8d3b573a 100644
--- a/rust/email-client/Cargo.toml
+++ b/rust/email-client/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "email-client"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 license = "Proprietary"
 description = "Generated GoDaddy Business Email Management API client (mailbox list/get/create/eligibility), produced from the vendored OpenAPI 3.0 spec by progenitor at build time."
diff --git a/rust/generated-client-support/Cargo.toml b/rust/generated-client-support/Cargo.toml
index 8db6502d..83123015 100644
--- a/rust/generated-client-support/Cargo.toml
+++ b/rust/generated-client-support/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "generated-client-support"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 license = "Proprietary"
 description = "Shared hand-written support code for progenitor-generated API clients (domains-client, shopping-client, email-client, ...): transport observation and authenticated-client construction."
diff --git a/rust/hosting-client/Cargo.toml b/rust/hosting-client/Cargo.toml
index 7b2406ae..9a4c492d 100644
--- a/rust/hosting-client/Cargo.toml
+++ b/rust/hosting-client/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "hosting-client"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 license = "Proprietary"
 description = "Generated GoDaddy Hosting API client, produced from the vendored OpenAPI 3.0 spec by progenitor at build time."
diff --git a/rust/shopping-client/Cargo.toml b/rust/shopping-client/Cargo.toml
index bc30cabf..6b6ccaba 100644
--- a/rust/shopping-client/Cargo.toml
+++ b/rust/shopping-client/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "shopping-client"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 license = "Proprietary"
 description = "Generated GoDaddy Shopping API client, produced from the vendored OpenAPI 3.0 spec by progenitor at build time."
diff --git a/rust/tools/generate-api-catalog/Cargo.toml b/rust/tools/generate-api-catalog/Cargo.toml
index 5a4bc0d7..27f16b0d 100644
--- a/rust/tools/generate-api-catalog/Cargo.toml
+++ b/rust/tools/generate-api-catalog/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "generate-api-catalog"
-version = "0.2.27"
+version = "0.2.28"
 edition = "2024"
 publish = false