diff --git a/kubevela.yaml b/kubevela.yaml
index e3815497f69..ab49e8ec6b4 100644
--- a/kubevela.yaml
+++ b/kubevela.yaml
@@ -1,7 +1,7 @@
 package:
   name: kubevela
   version: "1.10.4"
-  epoch: 0 # CVE-2025-47907
+  epoch: 1 # CVE-2025-47907
   description: KubeVela is a modern application delivery platform that makes deploying and operating applications across today's hybrid, multi-cloud environments easier, faster and more reliable
   copyright:
     - license: Apache-2.0
@@ -13,7 +13,7 @@ package:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: a8b652e59da9a3349ccb0e9d455c04c8d88e0868
+      expected-commit: 17b7edca9e25bcd9aa1ff2bf6a7aa76564318dcc
       repository: https://github.com/kubevela/kubevela
       tag: v${{package.version}}