chore(ci): bump stellar/stellar-cli from 27.1.0 to 28.1.0

[dependabot]

Bumps stellar/stellar-cli from 27.1.0 to 28.1.0.

Release notes

Sourced from stellar/stellar-cli's releases.

28.1.0

🪙 Token commands

The stellar token <subcommand> implements SEP-41, so you can inspect and manage tokens without dropping down to raw contract invocations:

• stellar token name, stellar token symbol, and stellar token decimals to read a token's metadata.
• stellar token approve and stellar token allowance to manage and check spending allowances.
• stellar token transfer-from to move tokens on behalf of another account.
• stellar token burn and stellar token burn-from to destroy tokens.

📦 Contract build & bindings

• New stellar contract build archive command.
• Container builds now stream image-pull progress, so you can see what's happening during long pulls.
• New Kotlin Multiplatform (KMP) target for stellar contract bindings.
• TypeScript bindings are now deprecated (stellar contract bindings typescript) in favor of https://github.com/stellar/js-stellar-sdk#cli.

🔧 Command improvements

• --contract-id is now accepted on all contract commands.
• contract alias remove is now available as contract alias rm.
• strkey decode/encode now accept their input as a positional argument.
• Malformed contract invoke arguments return a clear error instead of panicking.
• Stricter validation for contract info build source repositories and attestation binding.

🤖 AI agents

• New stellar skill command to expose CLI capabilities to AI agents.

Full Changelog: stellar/stellar-cli@v28.0.0...v28.1.0

28.0.0

stellar-cli v28.0.0 — Release Notes

🚀 New Features

• 📦 Build contracts in a container — stellar contract build can now run inside a container, giving you reproducible builds without fussing over your local toolchain. (#2678)
• 🤖 AGENTS.md on init — stellar contract init now generates an AGENTS.md file so AI coding agents have project context out of the box. (#2687)
• 🔗 Protocol 28 support — the CLI now speaks Protocol 28. (#2702)

🛠️ Improvements

• 🔍 Better failure diagnostics — when a transaction fails on-chain, the CLI now surfaces the diagnostic events so you can actually see what went wrong. (#2700)

🐛 Bug Fixes

• 💸 Fixed tx simulate re-assembly — no longer drops auth entries or double-counts fees. (#2666)
• 📁 Fixed manifest path separator in container builds. (#2688)

🔒 Security & Hardening

... (truncated)

Commits

• c0f4d0d Bump version to 28.1.0 (#2756)
• 91dd041 Accept strkey decode/encode input as an argument (#2757)
• 739f4d5 Support muxed account destinations for token transfer (#2754)
• c4cc455 Update stellar-strkey to 0.0.18 (#2614)
• c8f3a5d Tighten contract info build source_repo validation and attestation binding ...
• 5e60f63 Pass CLI major version to SDK in contract build (#2749)
• 5acb463 Add stellar token burn-from command (#2746)
• 5a20214 Add stellar token burn command (#2744)
• b9a2063 Add stellar token transfer-from command (#2743)
• 9817cf1 Fix action install for Windows (#2741)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
commitlabs_frontend	Error		Oct 5, 2026 6:15am UTC