diff --git a/Dockerfile b/Dockerfile
index 51d848a0..e314c4d4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -27,8 +27,7 @@ RUN apt-get update && apt install -y libcap2-bin
 RUN setcap CAP_NET_BIND_SERVICE=+ep /usr/local/bin/envoy
 RUN setcap CAP_NET_BIND_SERVICE=+ep /usr/local/bin/$BIN_NAME
 
-#TODO: update to 1.28.1 before next release
-FROM hashicorp/envoy-fips:1.28.0-fips1402 as envoy-fips-binary
+FROM hashicorp/envoy-fips:1.28.1-fips1402 as envoy-fips-binary
 
 # Modify the envoy-fips binary to be able to bind to privileged ports (< 1024).
 FROM debian:bullseye-slim AS setcap-envoy-fips-binary