diff --git a/snyk-cli.yaml b/snyk-cli.yaml
index b5b7dbfeedd..34de778c227 100644
--- a/snyk-cli.yaml
+++ b/snyk-cli.yaml
@@ -1,7 +1,7 @@
 package:
   name: snyk-cli
   version: "1.1295.4"
-  epoch: 0
+  epoch: 1
   description: Snyk CLI scans and monitors your projects for security vulnerabilities
   copyright:
     - license: Apache-2.0
@@ -32,6 +32,13 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: b1e2445578abbb425a96611e4e58ff8057329e82
 
+  - uses: go/bump
+    with:
+      modroot: cliv2
+      deps: |-
+        golang.org/x/crypto@v0.35.0
+        golang.org/x/oauth2@v0.27.0
+
   - runs: git checkout -b release/wolfi # This is so the determine-release-channel.sh script decides the to use the correct channel and not create a -dev version
 
   - uses: patch