diff --git a/CHANGELOG.md b/CHANGELOG.md
index ea2b7d2..c42aa68 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,21 @@ follows:
    releases, and Linux kernel updates. They're also made to fix bugs and add
    features to the build infrastructure.
 
+## v1.28.1
+
+This is a security/bug fix update.
+
+* Changes
+  * Enable QMI kernel modules to support many cellular modems without a Nerves
+    system update
+  * Reduce copy/pasted definitions in the `fwup.conf` by extracting them to
+    `fwup_include/fwup-common.conf`. (No functional changes)
+
+* Updated dependencies
+  * [nerves_system_br v1.28.3](https://github.com/nerves-project/nerves_system_br/releases/tag/v1.28.3)
+  * [Buildroot 2024.05.2](https://lore.kernel.org/buildroot/87zfpfh147.fsf@dell.be.48ers.dk/T/)
+  * [Erlang/OTP 27.0.1](https://erlang.org/download/OTP-27.0.1.README)
+
 ## v1.28.0
 
 This is a major Erlang and Buildroot.
@@ -21,8 +36,6 @@ for upgrade instructions if you've forked this system.
 
 * Changes
   * Elixir 1.17 and Erlang/OTP 27 support
-  * Reduce copy/pasted definitions in the `fwup.conf` by extracting them to
-    `fwup_include/fwup-common.conf`. (No functional changes)
 
 * Fixes
   * The serial numbers returned by `Nerves.Runtime.serial_number/0` now contain
diff --git a/VERSION b/VERSION
index cfc7307..450a687 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.28.0
+1.28.1