diff --git a/buildkitd.yaml b/buildkitd.yaml
index 6439b21bb90..dfa853f5546 100644
--- a/buildkitd.yaml
+++ b/buildkitd.yaml
@@ -2,7 +2,7 @@ package:
   name: buildkitd
   version: "0.25.2"
   description: "concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit"
-  epoch: 1 # CVE-2025-58187
+  epoch: 2
   copyright:
     - license: Apache-2.0
   dependencies:
@@ -31,6 +31,7 @@ pipeline:
   - uses: go/bump
     with:
       deps: |-
+        github.com/containerd/containerd/v2@v2.1.5
         github.com/opencontainers/selinux@v1.13.0
 
   - uses: go/build