diff --git a/cluster-api-aws-controller.yaml b/cluster-api-aws-controller.yaml
index 1287a5e8e48..47f491a50e9 100644
--- a/cluster-api-aws-controller.yaml
+++ b/cluster-api-aws-controller.yaml
@@ -1,7 +1,7 @@
 package:
   name: cluster-api-aws-controller
   version: "2.8.4"
-  epoch: 1 # GHSA-vvgc-356p-c3xw
+  epoch: 2
   description: Kubernetes Cluster API Provider AWS provides consistent deployment and day 2 operations of "self-managed" and EKS Kubernetes clusters on AWS
   copyright:
     - license: Apache-2.0
@@ -20,12 +20,14 @@ pipeline:
     with:
       deps: |-
         golang.org/x/net@v0.38.0
-      modroot: hack/tools
+        golang.org/x/oauth2@v0.27.0
 
   - uses: go/bump
     with:
       deps: |-
         golang.org/x/net@v0.38.0
+        golang.org/x/oauth2@v0.27.0
+      modroot: hack/tools
 
   - uses: go/build
     with: