diff --git a/step-ca.yaml b/step-ca.yaml
index c067284afb8..957ab9df0b2 100644
--- a/step-ca.yaml
+++ b/step-ca.yaml
@@ -1,6 +1,6 @@
 package:
   name: step-ca
-  version: 0.27.5
+  version: 0.28.0
   epoch: 0
   description: A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
   copyright:
@@ -18,7 +18,7 @@ pipeline:
     with:
       repository: https://github.com/smallstep/certificates
       tag: v${{package.version}}
-      expected-commit: 8d0b4d78ddd2f01784e66ef20c537c018645e799
+      expected-commit: df13aaef0b9cb5f0d6e9c011695214dbafff7aca
 
   - runs: |
       CGO_ENABLED=0 go build -v \