diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d4705789d..d596d054c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -133,7 +133,7 @@ jobs:
       matrix:
         # Run these tests against older clusters as well
         k8s:
-        - "1.27" # MK8SV
+        - "v1.28" # MK8SV
         - "latest"
     steps:
       - uses: actions/checkout@v4
@@ -200,7 +200,7 @@ jobs:
 
       - uses: nolar/setup-k3d-k3s@v1
         with:
-          version: "1.27" # MK8SV
+          version: "v1.28" # MK8SV
           # k3d-kube
           k3d-name: kube
           # Used to avoid rate limits when fetching the releases from k3s repo.
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 559d7806e..d51dfd9e4 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -29,7 +29,7 @@ jobs:
           tool: cargo-tarpaulin@0.28.0
       - uses: nolar/setup-k3d-k3s@v1
         with:
-          version: "v1.27" # MK8SV
+          version: "v1.28" # MK8SV
           # k3d-kube
           k3d-name: kube
           # Used to avoid rate limits when fetching the releases from k3s repo.
diff --git a/justfile b/justfile
index 6acbfd3da..7210b80a3 100644
--- a/justfile
+++ b/justfile
@@ -122,8 +122,8 @@ bump-k8s:
   min_feat="${earliest::-2}${earliest:3}"
   min_dots="${min_feat/_/.}"
   echo "Setting MK8SV to $min_dots using feature $min_feat"
-  # workflow pins for k3s
-  sd '^.+K3S_MIN\: .*$' "  K3S_MIN: \"${min_dots}\"" .github/workflows/*.yml
+  # workflow pins for k3s (any line with key/array suffixed by # MK8SV)
+  sd "(.*)([\:\-]{1}) .* # MK8SV$" "\$1\$2 \"${min_dots}\" # MK8SV" .github/workflows/*.yml
   # bump mk8sv badge
   badge="[![Tested against Kubernetes ${min_dots} and above](https://img.shields.io/badge/MK8SV-${min_dots}-326ce5.svg)](https://kube.rs/kubernetes-version)"
   sd "^.+badge/MK8SV.+$" "${badge}" README.md