diff --git a/go.mod b/go.mod
index 648a17567..46feaccff 100644
--- a/go.mod
+++ b/go.mod
@@ -59,7 +59,7 @@ require (
 )
 
 // use forked version until we can get the fixes merged see https://github.com/conforma/go-containerregistry/blob/main/hack/ec-patches.sh for a list of patches we carry
-replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.21.8-0.20260702142841-f9eefe19c7b2
+replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.21.8-0.20261020161546-930c8af5b492
 
 require (
 	github.com/go-openapi/runtime v0.32.4
@@ -391,7 +391,7 @@ require (
 	golang.org/x/crypto v0.57.0 // indirect
 	golang.org/x/mod v0.41.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/sys v0.48.0 // indirect
+	golang.org/x/sys v0.49.0 // indirect
 	golang.org/x/term v0.46.0 // indirect
 	golang.org/x/time v0.15.0 // indirect
 	golang.org/x/tools v0.49.0 // indirect
diff --git a/go.sum b/go.sum
index cf3229ee0..d8d5fcddc 100644
--- a/go.sum
+++ b/go.sum
@@ -325,8 +325,8 @@ github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be h1:J5BL
 github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be/go.mod h1:mk5IQ+Y0ZeO87b858TlA645sVcEcbiX6YqP98kt+7+w=
 github.com/conforma/crds/api v0.1.7 h1:IBsIw35A5QkP5i1Se6/BASaFvTnW+xTlWEqJMdX7EiA=
 github.com/conforma/crds/api v0.1.7/go.mod h1:vaUCN54r99HME4555KRKOUPGJxBNAlX1agZ4jlGI2YA=
-github.com/conforma/go-containerregistry v0.21.8-0.20260702142841-f9eefe19c7b2 h1:bzI4Ct9XZwZYkoII5x/6dunztS+hh6JZRvAGuJfoy70=
-github.com/conforma/go-containerregistry v0.21.8-0.20260702142841-f9eefe19c7b2/go.mod h1:oCPfU4CuHJHCjfKVdKys7ovSiqtwwGHqUC07pRYh+f8=
+github.com/conforma/go-containerregistry v0.21.8-0.20261020161546-930c8af5b492 h1:BzjflQDWFP+T6IEWVT15Anq3dq30bb2o74a66cKZtQU=
+github.com/conforma/go-containerregistry v0.21.8-0.20261020161546-930c8af5b492/go.mod h1:peqHscMZ/d/ro07Zi3xM8MweN6BHXDE665PWkgISIzk=
 github.com/conforma/go-gather v1.2.0 h1:HYmUtkGPQRUOb2mEBQ51FTSO0SpZ//12mNp2AXcVxBs=
 github.com/conforma/go-gather v1.2.0/go.mod h1:7LbJh5AAljGbOoUWQy+wBKu7MKecyG45bLbbe7Bo0/A=
 github.com/containerd/containerd/v2 v2.3.4 h1:c2PJo/9UGVdiiw8SwrxuLxWGY+9b3jQ6Xp9zntneIvI=
@@ -1530,8 +1530,8 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
-golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
+golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=