diff --git a/CHANGELOG.md b/CHANGELOG.md
index d1ecd3f..e4b7c2d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.28.0] - 2024-07-11
+
+### Changed
+    - Bump Flex and Stax SDK versions
+    - Bump Ragger version
+
 ## [3.27.0] - 2024-07-04
 
 ### Changed
diff --git a/dev-tools/Dockerfile b/dev-tools/Dockerfile
index b91946a..70d45fc 100644
--- a/dev-tools/Dockerfile
+++ b/dev-tools/Dockerfile
@@ -20,4 +20,4 @@ ARG PYTHON_BUILD_DEPS=libffi-dev,python3-dev,py3-virtualenv
 RUN apk add $(echo -n "$PYTHON_BUILD_DEPS" | tr , ' ')
 
 # Install test tools (Ragger framework, Speculos emulator, Ledgerblue...)
-RUN pip3 install --no-cache-dir "ragger[tests,all_backends]==1.20.2" "speculos==0.9.5"
+RUN pip3 install --no-cache-dir "ragger[tests,all_backends]==1.20.3" "speculos==0.9.5"
diff --git a/lite/Dockerfile b/lite/Dockerfile
index 05bc5b8..942e2c3 100644
--- a/lite/Dockerfile
+++ b/lite/Dockerfile
@@ -86,14 +86,14 @@ ENV NANOSP_SDK=/opt/nanosplus-secure-sdk
 RUN git -C "$LEDGER_SECURE_SDK" worktree add "$NANOSP_SDK" v5.13.0
 RUN echo nanos2 > $NANOSP_SDK/.target
 
-# Latest Stax SDK (OS stax_1.4.0 => based on API_LEVEL 15)
+# Latest Stax SDK (OS stax_1.5.0 => based on API_LEVEL 21)
 ENV STAX_SDK=/opt/stax-secure-sdk
-RUN git -C "$LEDGER_SECURE_SDK" worktree add "$STAX_SDK" v15.7.0
+RUN git -C "$LEDGER_SECURE_SDK" worktree add "$STAX_SDK" v21.1.0
 RUN echo stax > $STAX_SDK/.target
 
-# Latest Flex SDK (OS flex_1.1.0-rc2 => based on API_LEVEL 21)
+# Latest Flex SDK (OS flex_1.1.0 => based on API_LEVEL 21)
 ENV FLEX_SDK=/opt/flex-secure-sdk
-RUN git -C "$LEDGER_SECURE_SDK" worktree add "$FLEX_SDK" v21.0.0
+RUN git -C "$LEDGER_SECURE_SDK" worktree add "$FLEX_SDK" v21.1.0
 RUN echo flex > $FLEX_SDK/.target
 
 # Default SDK