diff --git a/CHANGELOG.md b/CHANGELOG.md
index 83212ec3d1..69b90a26de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## [Unreleased]
+## [v1.28.0] - 2023-11-10
 
 - Add lint rules for [protovalidate](https://github.com/bufbuild/protovalidate). `buf lint`
   will now verify that your protovalidate rules are valid. A single rule `PROTOVALIDATE` has been
@@ -973,7 +973,7 @@ buf check breaking proto --against .git#branch=master,subdir=proto
 
 Initial beta release.
 
-[Unreleased]: https://github.com/bufbuild/buf/compare/v1.27.2...HEAD
+[v1.28.0]: https://github.com/bufbuild/buf/compare/v1.27.2...v1.28.0
 [v1.27.2]: https://github.com/bufbuild/buf/compare/v1.27.1...v1.27.2
 [v1.27.1]: https://github.com/bufbuild/buf/compare/v1.27.0...v1.27.1
 [v1.27.0]: https://github.com/bufbuild/buf/compare/v1.26.1...v1.27.0
diff --git a/private/buf/bufcli/bufcli.go b/private/buf/bufcli/bufcli.go
index d5e66b6747..05a909cded 100644
--- a/private/buf/bufcli/bufcli.go
+++ b/private/buf/bufcli/bufcli.go
@@ -65,7 +65,7 @@ import (
 
 const (
 	// Version is the CLI version of buf.
-	Version = "1.27.3-dev"
+	Version = "1.28.0"
 
 	inputHTTPSUsernameEnvKey      = "BUF_INPUT_HTTPS_USERNAME"
 	inputHTTPSPasswordEnvKey      = "BUF_INPUT_HTTPS_PASSWORD"