diff --git a/testing/download_pkgs_at_root/WORKSPACE b/testing/download_pkgs_at_root/WORKSPACE
index f3dd54718..4dfe19e61 100644
--- a/testing/download_pkgs_at_root/WORKSPACE
+++ b/testing/download_pkgs_at_root/WORKSPACE
@@ -45,11 +45,11 @@ http_archive(
 
 http_archive(
     name = "bazel_toolchains",
-    sha256 = "28cb3666da80fbc62d4c46814f5468dd5d0b59f9064c0b933eee3140d706d330",
-    strip_prefix = "bazel-toolchains-0.27.1",
+    sha256 = "68e7678473090542e679ce7e6aa8a3ba5669577dede2b404f9865d556bd99f10",
+    strip_prefix = "bazel-toolchains-0.28.0",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-toolchains/archive/0.27.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-toolchains/archive/0.27.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-toolchains/archive/0.28.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-toolchains/archive/0.28.0.tar.gz",
     ],
 )