Release CPO 1.28 and others

Upstream CPO haven't seen releases for a while. It doesn't affect us, but we got to make sure customers of upstream use what we use too, so that we can benefit from shared testing.