diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a83c859096..ca2e1867ec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -81,6 +81,8 @@ jobs:
       - uses: actions/attest-build-provenance@v3
         with:
           subject-checksums: ./dist/lego_*_checksums.txt
+          github-token: ${{ secrets.GH_TOKEN_REPO }}
       - uses: actions/attest-build-provenance@v3
         with:
           subject-checksums: ./dist/digests.txt
+          github-token: ${{ secrets.GH_TOKEN_REPO }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ccfd912d59..31f8ff5699 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,15 @@ Everybody thinks that the others will donate, but in the end, nobody does.
 
 So if you think that lego is worth it, please consider [donating](https://donate.ldez.dev).
 
+## v4.28.1
+
+- Release date: 2025-11-06
+- Tag: [v4.28.1](https://github.com/go-acme/lego/releases/tag/v4.28.1)
+
+### Fixed
+
+- **[cli]** fix: skip nil response
+
 ## v4.28.0
 
 - Release date: 2025-10-31
diff --git a/acme/api/internal/sender/useragent.go b/acme/api/internal/sender/useragent.go
index 903fd74834..bcfbebb2aa 100644
--- a/acme/api/internal/sender/useragent.go
+++ b/acme/api/internal/sender/useragent.go
@@ -4,7 +4,7 @@ package sender
 
 const (
 	// ourUserAgent is the User-Agent of this underlying library package.
-	ourUserAgent = "xenolf-acme/4.28.0"
+	ourUserAgent = "xenolf-acme/4.28.1"
 
 	// ourUserAgentComment is part of the UA comment linked to the version status of this underlying library package.
 	// values: detach|release
diff --git a/cmd/lego/zz_gen_version.go b/cmd/lego/zz_gen_version.go
index afee843172..b564906c17 100644
--- a/cmd/lego/zz_gen_version.go
+++ b/cmd/lego/zz_gen_version.go
@@ -2,7 +2,7 @@
 
 package main
 
-const defaultVersion = "v4.28.0+dev-detach"
+const defaultVersion = "v4.28.1+dev-detach"
 
 var version = ""
 
diff --git a/providers/dns/internal/useragent/useragent.go b/providers/dns/internal/useragent/useragent.go
index 2a48e19427..1e176ab9a8 100644
--- a/providers/dns/internal/useragent/useragent.go
+++ b/providers/dns/internal/useragent/useragent.go
@@ -10,7 +10,7 @@ import (
 
 const (
 	// ourUserAgent is the User-Agent of this underlying library package.
-	ourUserAgent = "goacme-lego/4.28.0"
+	ourUserAgent = "goacme-lego/4.28.1"
 
 	// ourUserAgentComment is part of the UA comment linked to the version status of this underlying library package.
 	// values: detach|release