diff --git a/k6.yaml b/k6.yaml
index 94e5b986e26..985970c5576 100644
--- a/k6.yaml
+++ b/k6.yaml
@@ -1,7 +1,7 @@
 package:
   name: k6
-  version: "1.4.2"
-  epoch: 1 # CVE-2025-61729
+  version: "1.5.0"
+  epoch: 0 # CVE-2025-61729
   description: A modern load testing tool, using Go and JavaScript
   copyright:
     - license: AGPL-3.0-or-later
@@ -17,12 +17,7 @@ pipeline:
     with:
       repository: https://github.com/grafana/k6
       tag: v${{package.version}}
-      expected-commit: 5b725e8a6a52659b9aad111b3457621f2ea69af7
-
-  - uses: go/bump
-    with:
-      deps: |-
-        golang.org/x/crypto@v0.45.0
+      expected-commit: 7961cefa120dc673ae1fec6a77a456e2e1cb5e65
 
   - uses: go/build
     with: