ci(deps): bump stellar/stellar-cli from 27.0.0 to 28.0.0

[dependabot]

Bumps stellar/stellar-cli from 27.0.0 to 28.0.0.

Release notes

Sourced from stellar/stellar-cli's releases.

28.0.0

stellar-cli v28.0.0 — Release Notes

🚀 New Features

• 📦 Build contracts in a container — stellar contract build can now run inside a container, giving you reproducible builds without fussing over your local toolchain. (#2678)
• 🤖 AGENTS.md on init — stellar contract init now generates an AGENTS.md file so AI coding agents have project context out of the box. (#2687)
• 🔗 Protocol 28 support — the CLI now speaks Protocol 28. (#2702)

🛠️ Improvements

• 🔍 Better failure diagnostics — when a transaction fails on-chain, the CLI now surfaces the diagnostic events so you can actually see what went wrong. (#2700)

🐛 Bug Fixes

• 💸 Fixed tx simulate re-assembly — no longer drops auth entries or double-counts fees. (#2666)
• 📁 Fixed manifest path separator in container builds. (#2688)

🔒 Security & Hardening

• 🧹 Strip control characters from auth entry prompts, contract read output, and other terminal output — closing off a class of terminal-injection tricks. (#2667, #2672, #2673)
• 📏 XDR depth limits — decoding contract spec/meta sections and XDR encoding/decoding now enforce nesting depth limits to guard against malicious or malformed input. (#2668, #2675)

---

🎉 New Contributors

• @​rohansingh4 made their first contribution in #2687

Full Changelog: stellar/stellar-cli@v27.1.0...v28.0.0

27.1.0

stellar-cli v27.1.0 — Release Notes

Tokens & Assets

• stellar token transfer — transfer tokens for SEP-41 and Stellar Asset Contracts (#2644)
• stellar token balance — new command to check token balances (#2651)
• Reserved native contract alias that resolves to the native asset (#2646)
• Centralized asset/token resolution behind a single resolver (#2654)

Containers

• Add support for container engines — Docker or Apple Container (#2643)
• stellar container use — set the default container engine (#2647)
• Add CPU and memory limits to container start (#2648)
• Shell out to Docker directly instead of using bollard (#2629)
• Move Docker image distribution to its own repo (#2616)
• Make latest the default quickstart image tag (#2649)

... (truncated)

Commits

• 300aaf6 Bump version to 28.0.0 (#2705)
• b8a4865 Find example wasm when target lives at workspace root (#2704)
• b37d549 Show diagnostic events when a transaction fails on-chain (#2700)
• ed9a14a Add support for Protocol 28 (#2702)
• 1e3bc83 Fix manifest path separator in container build (#2688)
• e89b669 Fix security advisories. (#2690)
• 80cc0f1 Generate AGENTS.md when running stellar contract init (#2687)
• a29a322 Add container support to stellar contract build (#2678)
• b8ef49e Strip control characters from contract read output (#2672)
• 965aa47 Add depth limit to xdr encoding and decoding (#2675)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, ci. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.