diff --git a/aws-cli-2.yaml b/aws-cli-2.yaml
index 4b40aea3c07..41fe527165d 100644
--- a/aws-cli-2.yaml
+++ b/aws-cli-2.yaml
@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-2
-  version: "2.28.1"
+  version: "2.28.6"
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -39,7 +39,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: 7728878b1e76331d3690b2f8a3197d980a951002
+      expected-commit: d2e56dea9946cda6fa0bf098cf1240fd83e1917b
       tag: ${{package.version}}
 
   - uses: patch
diff --git a/aws-cli-2/GHSA-5rjg-fvgr-3xxf.patch b/aws-cli-2/GHSA-5rjg-fvgr-3xxf.patch
index 097d3c608c0..24965899fab 100644
--- a/aws-cli-2/GHSA-5rjg-fvgr-3xxf.patch
+++ b/aws-cli-2/GHSA-5rjg-fvgr-3xxf.patch
@@ -16,20 +16,20 @@ index cd28a6d7a..b04a8bbff 100644
  wheel==0.38.4 \
      --hash=sha256:965f5259b566725405b05e7cf774052044b1ed30119b5d586b2703aafe8719ac \
 diff --git a/requirements/download-deps/bootstrap-win-lock.txt b/requirements/download-deps/bootstrap-win-lock.txt
-index 822103935..5f1bded49 100644
+index 191fdc7..c28206d 100644
 --- a/requirements/download-deps/bootstrap-win-lock.txt
 +++ b/requirements/download-deps/bootstrap-win-lock.txt
-@@ -14,9 +14,9 @@ pip==25.1.1 \
-     --hash=sha256:2913a38a2abf4ea6b64ab507bd9e967f3b53dc1ede74b01b0931e1ce548751af \
-     --hash=sha256:3de45d411d308d5054c2168185d8da7f9a2cd753dbac8acbfa88a8909ecd9077
-     # via -r requirements\bootstrap.txt
+@@ -14,9 +14,9 @@ pip==25.2 \
+     --hash=sha256:578283f006390f85bb6282dffb876454593d637f5d1be494b5202ce4877e71f2 \
+     --hash=sha256:6d67a2b4e7f14d8b31b8b52648866fa717f45a1eb70e83002f4331d07e953717
+     # via -r D:/a/aws-cli/aws-cli/requirements/bootstrap.txt
 -setuptools==71.1.0 \
 -    --hash=sha256:032d42ee9fb536e33087fb66cac5f840eb9391ed05637b3f2a76a7c8fb477936 \
 -    --hash=sha256:33874fdc59b3188304b2e7c80d9029097ea31627180896fb549c578ceb8a0855
 +setuptools==78.1.1 \
 +    --hash=sha256:c3a9c4211ff4c309edb8b8c4f1cbfa7ae324c4ba9f91ff254e3d305b9fd54561 \
 +    --hash=sha256:fcc17fd9cd898242f6b4adfaca46137a9edef687f43e6f78469692a5e70d851d
-     # via -r requirements\download-deps\bootstrap.txt
+     # via -r D:/a/aws-cli/aws-cli/requirements/download-deps/bootstrap.txt
  wheel==0.38.4 \
      --hash=sha256:965f5259b566725405b05e7cf774052044b1ed30119b5d586b2703aafe8719ac \
 diff --git a/requirements/download-deps/bootstrap.txt b/requirements/download-deps/bootstrap.txt