diff --git a/bank-vaults.yaml b/bank-vaults.yaml
index feb3a0be6c..675545faf0 100644
--- a/bank-vaults.yaml
+++ b/bank-vaults.yaml
@@ -1,7 +1,7 @@
 package:
   name: bank-vaults
   version: 1.20.4
-  epoch: 7
+  epoch: 8
   description: A Vault swiss-army knife. A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
   copyright:
     - license: Apache-2.0
@@ -24,7 +24,8 @@ pipeline:
   - uses: go/bump
     with:
       # CVE-2023-39325 and CVE-2023-3978
-      deps: golang.org/x/net@v0.17.0 google.golang.org/grpc@v1.56.3 github.com/go-jose/go-jose/v3@v3.0.1 golang.org/x/crypto@v0.17.0
+      deps: golang.org/x/net@v0.17.0 google.golang.org/grpc@v1.56.3 golang.org/x/crypto@v0.17.0
+      replaces: github.com/go-jose/go-jose/v3=github.com/go-jose/go-jose/v3@v3.0.3
 
   - uses: go/build
     with: