diff --git a/CHANGELOG.md b/CHANGELOG.md
index ede600d1d..e5d1c85fa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,12 @@
 ## Breaking changes
 
 -->
+# Relase 5.28
+
+## Release notes
+
+* Changed: the wire-builds reference for 2026-q1 with 5.28 backend
+
 # Relase 5.27
 
 ## Release notes
diff --git a/ansible/inventory/demo/host.yml b/ansible/inventory/demo/host.yml
index 0e4a23614..5c5230cf7 100644
--- a/ansible/inventory/demo/host.yml
+++ b/ansible/inventory/demo/host.yml
@@ -18,7 +18,7 @@ wiab:
     wire_ip: ""
 
     # artifact_hash
-    artifact_hash: "54c1c37d9b5d963d581d43e38c2c0b93c4c086d9"
+    artifact_hash: "8b427c9d8cb7ca40bcf592baae5692eb32772f28"
   
     # docker vars
     docker_ce_version: "5:28.1.1-1~ubuntu.24.04~noble"
diff --git a/ansible/inventory/demo/wiab-staging.yml b/ansible/inventory/demo/wiab-staging.yml
index 30af930c8..34207fea0 100644
--- a/ansible/inventory/demo/wiab-staging.yml
+++ b/ansible/inventory/demo/wiab-staging.yml
@@ -6,6 +6,6 @@ wiab-staging:
       ansible_user: 'demo'
       ansible_ssh_private_key_file: "~/.ssh/id_ed25519"
   vars:
-    artifact_hash: 54c1c37d9b5d963d581d43e38c2c0b93c4c086d9
+    artifact_hash: 8b427c9d8cb7ca40bcf592baae5692eb32772f28
     # when enabled, disable WAN SNAT/masquerading for VMs on the private network
     private_deployment: true
diff --git a/offline/tasks/proc_pull_charts.sh b/offline/tasks/proc_pull_charts.sh
index ee3c69bf2..d3ff8a434 100755
--- a/offline/tasks/proc_pull_charts.sh
+++ b/offline/tasks/proc_pull_charts.sh
@@ -84,5 +84,5 @@ pull_charts() {
 
 }
 
-wire_build="https://raw.githubusercontent.com/wireapp/wire-builds/20fc45b2199c71c22b94371b0c5a1697b1b952c6/build.json"
+wire_build="https://raw.githubusercontent.com/wireapp/wire-builds/69988e51523016399b23a74d2cffe063545e3f58/build.json"
 wire_build_chart_release "$wire_build" | pull_charts
diff --git a/values/sftd/demo-values.example.yaml b/values/sftd/demo-values.example.yaml
index 91dc2c885..566db6bc4 100644
--- a/values/sftd/demo-values.example.yaml
+++ b/values/sftd/demo-values.example.yaml
@@ -3,10 +3,6 @@ host: sftd.example.com
 replicaCount: 1
 joinCall:
   replicaCount: 1
-  image:
-    repository: docker.io/bitnamilegacy/nginx
-    pullPolicy: IfNotPresent
-    tag: "1.27.3-debian-12-r5"
 tls:
   issuerRef:
     name: letsencrypt-http01
diff --git a/values/sftd/prod-values.example.yaml b/values/sftd/prod-values.example.yaml
index 1c2374f9e..e93462308 100644
--- a/values/sftd/prod-values.example.yaml
+++ b/values/sftd/prod-values.example.yaml
@@ -14,10 +14,6 @@ joinCall:
 # this value should be set to 3 when deployed in a full production DMZ manner
 # replicaCount = 1 is to support the simple wiab-staging solution
   replicaCount: 1
-  image:
-    repository: docker.io/bitnamilegacy/nginx
-    pullPolicy: IfNotPresent
-    tag: "1.27.3-debian-12-r5"
 
 # Uncomment to enable SFT to SFT communication for federated calls
 # multiSFT: