diff --git a/.github/workflows/diffuse.yml b/.github/workflows/diffuse.yml
index a9bef04f1e..03353cc4c2 100644
--- a/.github/workflows/diffuse.yml
+++ b/.github/workflows/diffuse.yml
@@ -8,7 +8,7 @@ permissions:
   pull-requests: write # to comment on PR
 
 env:
-  NDK_VERSION: '27.2.12479018'
+  NDK_VERSION: '28.0.13004108'
 
 jobs:
   assemble-base:
diff --git a/constants.gradle.kts b/constants.gradle.kts
index c681e32c28..801191853f 100644
--- a/constants.gradle.kts
+++ b/constants.gradle.kts
@@ -2,6 +2,6 @@ val signalBuildToolsVersion by extra("35.0.0")
 val signalCompileSdkVersion by extra("android-35")
 val signalTargetSdkVersion by extra(34)
 val signalMinSdkVersion by extra(21)
-val signalNdkVersion by extra("27.0.12077973")
+val signalNdkVersion by extra("28.0.13004108")
 val signalJavaVersion by extra(JavaVersion.VERSION_17)
 val signalKotlinJvmTarget by extra("17")
diff --git a/reproducible-builds/Dockerfile b/reproducible-builds/Dockerfile
index 6efa7285e3..8afa5214fe 100644
--- a/reproducible-builds/Dockerfile
+++ b/reproducible-builds/Dockerfile
@@ -27,7 +27,7 @@ RUN unzip ${ANDROID_COMMAND_LINE_TOOLS_FILENAME} -d /usr/local/android-sdk-linux
 RUN rm ${ANDROID_COMMAND_LINE_TOOLS_FILENAME}
 
 RUN yes | sdkmanager --update --sdk_root="${ANDROID_HOME}"
-RUN yes | sdkmanager --sdk_root="${ANDROID_HOME}" "platforms;${ANDROID_API_LEVELS}" "build-tools;${ANDROID_BUILD_TOOLS_VERSION}" "extras;google;m2repository" "extras;android;m2repository" "extras;google;google_play_services" "ndk;27.0.12077973" "cmake;3.22.1"
+RUN yes | sdkmanager --sdk_root="${ANDROID_HOME}" "platforms;${ANDROID_API_LEVELS}" "build-tools;${ANDROID_BUILD_TOOLS_VERSION}" "extras;google;m2repository" "extras;android;m2repository" "extras;google;google_play_services" "ndk;28.0.13004108" "cmake;3.22.1"
 
 RUN yes | sdkmanager --licenses --sdk_root="${ANDROID_HOME}"