From 46840b4471a99f230277967486ca1d3100c0be6f Mon Sep 17 00:00:00 2001
From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com>
Date: Thu, 10 Oct 2024 07:07:48 +0000
Subject: [PATCH] policy-controller/0.9.0-r10: fix GHSA-4f8r-qqr9-fq8j

---
 policy-controller.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/policy-controller.yaml b/policy-controller.yaml
index 69389d5513..fee1fb4efa 100644
--- a/policy-controller.yaml
+++ b/policy-controller.yaml
@@ -1,7 +1,7 @@
 package:
   name: policy-controller
   version: 0.9.0
-  epoch: 10
+  epoch: 11
   description: The policy admission controller used to enforce policy on a cluster on verifiable supply-chain metadata from cosign.
   copyright:
     - license: Apache-2.0
@@ -26,7 +26,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.6.0 github.com/hashicorp/go-retryablehttp@v0.7.7 github.com/docker/docker@v26.1.5 github.com/open-policy-agent/opa@v0.68.0
+      deps: github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.6.0 github.com/hashicorp/go-retryablehttp@v0.7.7 github.com/docker/docker@v26.1.5 github.com/open-policy-agent/opa@v0.68.0 github.com/theupdateframework/go-tuf@v2.0.1
 
   - runs: |
       mkdir -p "${{targets.destdir}}/usr/bin"