diff --git a/CHANGELOG.md b/CHANGELOG.md
index 98843e4..5be45c4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- `CLIInstaller::PINNED_CLI_VERSION` moves from 2.1.288 to **2.1.289**, following the CLI the Python SDK bundles. `CLIInstaller.install_pinned` installs it. See the [Claude Code changelog](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md).
+
 ## [1.2.1] - 2026-10-06
 
 An internal release: three refactors that move duplicated or scattered logic into one private module each. No public API, signature (`sig/`) or documented behavior changes; one cleanup difference is noted below.
diff --git a/lib/claude_agent_sdk/cli_installer.rb b/lib/claude_agent_sdk/cli_installer.rb
index f537499..044e9c9 100644
--- a/lib/claude_agent_sdk/cli_installer.rb
+++ b/lib/claude_agent_sdk/cli_installer.rb
@@ -53,7 +53,7 @@ module CLIInstaller # rubocop:disable Metrics/ModuleLength -- Http/Platform/Rele
     # Single source of truth: bumped here (and only here) by
     # .github/workflows/cli-pin-bump.yml or a Python-sync release, so a
     # Dependabot bump of the gem carries the CLI forward with it.
-    PINNED_CLI_VERSION = '2.1.288'
+    PINNED_CLI_VERSION = '2.1.289'
     # @api private
     BINARY_NAME = 'claude'
     # @api private