diff --git a/policy-controller.yaml b/policy-controller.yaml
index 69389d5513..fee1fb4efa 100644
--- a/policy-controller.yaml
+++ b/policy-controller.yaml
@@ -1,7 +1,7 @@
 package:
   name: policy-controller
   version: 0.9.0
-  epoch: 10
+  epoch: 11
   description: The policy admission controller used to enforce policy on a cluster on verifiable supply-chain metadata from cosign.
   copyright:
     - license: Apache-2.0
@@ -26,7 +26,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.6.0 github.com/hashicorp/go-retryablehttp@v0.7.7 github.com/docker/docker@v26.1.5 github.com/open-policy-agent/opa@v0.68.0
+      deps: github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.6.0 github.com/hashicorp/go-retryablehttp@v0.7.7 github.com/docker/docker@v26.1.5 github.com/open-policy-agent/opa@v0.68.0 github.com/theupdateframework/go-tuf@v2.0.1
 
   - runs: |
       mkdir -p "${{targets.destdir}}/usr/bin"