release: 2.28.1

[github-actions]

Automated Release PR

2.28.1 (2026-07-27)

Bug Fixes

• cli: Avoid printing configs in endpoint ls command (#481) (8db153c)
• cli: display fine-tune checkpoint object names (#477) (38bdfc2)
• cli: handle dotted file download directories (#484) (28a9c95)
• cli: handle missing fine-tuning price estimates (#482) (ae1910e)
• cli: Improve endpoint replica parameter bounds and inference for beta endpoint commands (#486) (fb7c42c)
• cli: inform about CLI upgrades at most once per day (DX-844) (#488) (5c1bb3a)
• cli: show fine-tune checkpoint registry names (#474) (e9e3254)
• openapi: remove rollout abort route (2afc8de)
• openapi: sync RL model input chunk schema (409e567)
• openapi: sync RL sampling contract (39268ad)
• rl: align CISPO/DRO loss schema names with GRPO/PPO (all-caps acronyms) (7e1c031)
• stlc: generate cross-entropy loss params type (a8d7c50)

Chores

• bump detect-agent to >=0.5.0 (#480) (03e6864)

Documentation

• openapi: allow combined LoRA target modules (d38e402)
• openapi: clarify RL loss mask optionality (183ba27)

Refactors

• generate better code (6e64889)

---

This PR was generated with Release Please. See documentation.

[broly-code-security-scanner]

Broly Security Scan

Note

✅ Clean scan
No vulnerabilities detected in this PR.

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (zai-org/GLM-5.2) · Secrets · SCA · GH Actions (zizmor) · Containers · SBOM · Powered by Together AI