diff --git a/go.mod b/go.mod
index 9ccc1655f..655594d43 100644
--- a/go.mod
+++ b/go.mod
@@ -60,7 +60,7 @@ require (
 )
 
 // use forked version until we can get the fixes merged see https://github.com/conforma/go-containerregistry/blob/main/hack/ec-patches.sh for a list of patches we carry
-replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.20.7-0.20250703195040-6f40a3734728
+replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae
 
 require (
 	github.com/go-openapi/runtime v0.28.0
diff --git a/go.sum b/go.sum
index 317c5cfdc..d5ceadf19 100644
--- a/go.sum
+++ b/go.sum
@@ -346,8 +346,8 @@ github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be h1:J5BL
 github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be/go.mod h1:mk5IQ+Y0ZeO87b858TlA645sVcEcbiX6YqP98kt+7+w=
 github.com/conforma/crds/api v0.1.7 h1:IBsIw35A5QkP5i1Se6/BASaFvTnW+xTlWEqJMdX7EiA=
 github.com/conforma/crds/api v0.1.7/go.mod h1:vaUCN54r99HME4555KRKOUPGJxBNAlX1agZ4jlGI2YA=
-github.com/conforma/go-containerregistry v0.20.7-0.20250703195040-6f40a3734728 h1:a2L+lVx9BYtwWDOHlouRNCzgG89Imc7Chbp2/Xjhpf0=
-github.com/conforma/go-containerregistry v0.20.7-0.20250703195040-6f40a3734728/go.mod h1:sdc2GWaYnuP7aY7cx4nTEW16xVJsVuqjZ+zyx5S0XeI=
+github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae h1:KoJk+DwW+UReJ47IFxJvEqlc3jOTzsXum5mQ85MEogg=
+github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae/go.mod h1:sdc2GWaYnuP7aY7cx4nTEW16xVJsVuqjZ+zyx5S0XeI=
 github.com/conforma/go-gather v1.0.2 h1:385cOcDpMxA7JpccMdbQOLIPsagQtDRAnSqZc1YTetI=
 github.com/conforma/go-gather v1.0.2/go.mod h1:e2yxUmy6KWE9+4mCcB0Vpk4CAHkvk21ktrq1m79BIyA=
 github.com/containerd/containerd/v2 v2.2.0 h1:K7TqcXy+LnFmZaui2DgHsnp2gAHhVNWYaHlx7HXfys8=