bazelisk/1.28.1 package update (#78467)

<p align="center">
<img
src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg"
/>
</p>
<!--ci-cve-scan:fail-any-->


**Commit**: 1e6aaf11d51e83ec8d18e66b461f49d4b7877321

> **Note:** If you need to make manual changes to this PR, apply the
`skip:staging-update-bot` label so the reconciler won't overwrite them.

<!--staging-update-bot-pr-data-->
<!--
{
  "PackageName": "bazelisk",
  "Version": "1.28.1",
  "Commit": "1e6aaf11d51e83ec8d18e66b461f49d4b7877321",
  "BumpEpoch": false,
  "Manual": false
}
-->
<!--/staging-update-bot-pr-data-->

Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev>

Author: octo-sts[bot]

bazelisk.yaml

@@ -1,6 +1,6 @@
 package:
   name: bazelisk
-  version: "1.28.0"
+  version: "1.28.1"
   epoch: 0 # CVE-2025-61725
   description: A user-friendly launcher for Bazel.
   copyright:
@@ -21,7 +21,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/bazelbuild/bazelisk
-      expected-commit: 166e156de50f30e3ef59fedf1aa6fc6cdd89a99f
+      expected-commit: 1e6aaf11d51e83ec8d18e66b461f49d4b7877321
       tag: v${{package.version}}
 
   # 1.26.0 update requires go mod tidy for some reason even without gobumps, may be removable later.