diff --git a/go.mod b/go.mod
index f6a72d547..e1a9a2fb2 100644
--- a/go.mod
+++ b/go.mod
@@ -60,7 +60,7 @@ require (
 )
 
 // use forked version until we can get the fixes merged see https://github.com/conforma/go-containerregistry/blob/main/hack/ec-patches.sh for a list of patches we carry
-replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.20.7-0.20250703195040-6f40a3734728
+replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae
 
 require (
 	github.com/go-openapi/runtime v0.28.0
diff --git a/go.sum b/go.sum
index 95a3c90c8..ded4e8306 100644
--- a/go.sum
+++ b/go.sum
@@ -346,8 +346,8 @@ github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be h1:J5BL
 github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be/go.mod h1:mk5IQ+Y0ZeO87b858TlA645sVcEcbiX6YqP98kt+7+w=
 github.com/conforma/crds/api v0.1.0 h1:Y2AAFKI5tywBxqr0tTBkhaiX8dsp8rkMN2CmrIofg9s=
 github.com/conforma/crds/api v0.1.0/go.mod h1:vaUCN54r99HME4555KRKOUPGJxBNAlX1agZ4jlGI2YA=
-github.com/conforma/go-containerregistry v0.20.7-0.20250703195040-6f40a3734728 h1:a2L+lVx9BYtwWDOHlouRNCzgG89Imc7Chbp2/Xjhpf0=
-github.com/conforma/go-containerregistry v0.20.7-0.20250703195040-6f40a3734728/go.mod h1:sdc2GWaYnuP7aY7cx4nTEW16xVJsVuqjZ+zyx5S0XeI=
+github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae h1:KoJk+DwW+UReJ47IFxJvEqlc3jOTzsXum5mQ85MEogg=
+github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae/go.mod h1:sdc2GWaYnuP7aY7cx4nTEW16xVJsVuqjZ+zyx5S0XeI=
 github.com/conforma/go-gather v1.0.2 h1:385cOcDpMxA7JpccMdbQOLIPsagQtDRAnSqZc1YTetI=
 github.com/conforma/go-gather v1.0.2/go.mod h1:e2yxUmy6KWE9+4mCcB0Vpk4CAHkvk21ktrq1m79BIyA=
 github.com/containerd/containerd/v2 v2.1.3 h1:eMD2SLcIQPdMlnlNF6fatlrlRLAeDaiGPGwmRKLZKNs=