diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE
index 27c9c941..8b137891 100644
--- a/CHANGES_NEXT_RELEASE
+++ b/CHANGES_NEXT_RELEASE
@@ -1,14 +1 @@
-- Add: new approach to handle trust auth (urbo-deployer#868)
-- Remove: field "authentication" support in update action
-- Remove: config.authentication (along with related env vars PERSEO_AUTHENTICATION_*)
-- Add: allow use expandVar with JSON objects (#703)
-- Add: apply expandVar with JSON.parse to all fields of all actions (sms, smpp, email, post, update) (#746)
-- Fix: check domain before access domain
-- Fix: expandVar return a 'null' instead of null (#746)
-- Fix: expandVar for single string values with null, boolean, number (#746)
-- Fix: smtp and smpp logs (#738)
-- Add: allow access entities using NGSIv2 API for non_signal rules (new setting nonSignalByAPI / PERSEO_CHECK_NON_SIGNAL_BY_API) (#549)
-- Remove support for ngsv1 notifications (#714)
-- Remove ngsiv1 support for updateAction (#714)
-- Fix: check timer string in lower case in TimedRule checker
-- Fix: dep of chai get-func-name to 2.0.0 to avoid installation errors
+
diff --git a/package.json b/package.json
index 24a5a896..97baff85 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
   "name": "perseo",
   "description": "IOT CEP front End",
   "license": "AGPL-3.0-only",
-  "version": "1.27.0-next",
+  "version": "1.28.0",
   "author": {
     "name": "crbrox",
     "email": "carlos.romerobrox@telefonica.com"
diff --git a/rpm/SPECS/cep.spec b/rpm/SPECS/cep.spec
index 560acc26..f9ca9cca 100644
--- a/rpm/SPECS/cep.spec
+++ b/rpm/SPECS/cep.spec
@@ -164,6 +164,22 @@ rm -rf $RPM_BUILD_ROOT
 %{_install_dir}
 
 %changelog
+* Tue Oct 3 2023 Alvaro Vega <alvaro.vegagarcia@telefonica.com> 1.28.0
+- Add: new approach to handle trust auth (urbo-deployer#868)
+- Add: allow use expandVar with JSON objects (#703)
+- Add: apply expandVar with JSON.parse to all fields of all actions (sms, smpp, email, post, update) (#746)
+- Add: allow access entities using NGSIv2 API for non_signal rules (new setting nonSignalByAPI / PERSEO_CHECK_NON_SIGNAL_BY_API) (#549)
+- Remove: field "authentication" support in update action
+- Remove: config.authentication (along with related env vars PERSEO_AUTHENTICATION_*)
+- Remove support for ngsv1 notifications (#714)
+- Remove ngsiv1 support for updateAction (#714)
+- Fix: check domain before access domain
+- Fix: expandVar return a 'null' instead of null (#746)
+- Fix: expandVar for single string values with null, boolean, number (#746)
+- Fix: smtp and smpp logs (#738)
+- Fix: check timer string in lower case in TimedRule checker
+- Fix: dep of chai get-func-name to 2.0.0 to avoid installation errors
+
 * Thu May 18 2023 Alvaro Vega <alvaro.vegagarcia@telefonica.com> 1.27.0
 - Add: support to run tests with node 18
 - Fix: do not flat in to map object or array attributes of event (#720)