diff --git a/.github/release-please/release-please-manifest.json b/.github/release-please/release-please-manifest.json
index ab44d05203..e5d76d61e2 100644
--- a/.github/release-please/release-please-manifest.json
+++ b/.github/release-please/release-please-manifest.json
@@ -5,6 +5,6 @@
   "lib/identifier": "0.4.0",
   "otdfctl": "0.35.0",
   "protocol/go": "0.39.0",
-  "sdk": "0.27.0",
+  "sdk": "0.28.0",
   "service": "0.24.0"
 }
\ No newline at end of file
diff --git a/sdk/CHANGELOG.md b/sdk/CHANGELOG.md
index c7b8e60666..4a7e617c50 100644
--- a/sdk/CHANGELOG.md
+++ b/sdk/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.28.0](https://github.com/opentdf/platform/compare/sdk/v0.27.0...sdk/v0.28.0) (2026-08-03)
+
+
+### Features
+
+* **sdk:** add AccessToken accessor to SDK ([#3775](https://github.com/opentdf/platform/issues/3775)) ([2911e22](https://github.com/opentdf/platform/commit/2911e22e1223cae5c81eadcc346000d3224a4fcd))
+
+
+### Bug Fixes
+
+* **sdk:** use bearer auth for non-dpop Connect tokens ([#3806](https://github.com/opentdf/platform/issues/3806)) ([4e140ac](https://github.com/opentdf/platform/commit/4e140ac657da626e30c0b60917407a7c6d615638))
+
 ## [0.27.0](https://github.com/opentdf/platform/compare/sdk/v0.26.0...sdk/v0.27.0) (2026-07-21)
 
 
diff --git a/sdk/version.go b/sdk/version.go
index c58543501a..3672b660a1 100644
--- a/sdk/version.go
+++ b/sdk/version.go
@@ -7,5 +7,5 @@ const (
 	TDFSpecVersion = "4.3.0"
 
 	// The three-part semantic version number of this SDK
-	Version = "0.27.0" // x-release-please-version
+	Version = "0.28.0" // x-release-please-version
 )