diff --git a/go.mod b/go.mod
index 827a521ae..5e60eaa9f 100644
--- a/go.mod
+++ b/go.mod
@@ -7,7 +7,7 @@ require (
 	buf.build/go/app v0.2.1-0.20260407195847-833f8f978cda
 	buf.build/go/interrupt v1.1.0
 	buf.build/go/standard v0.1.1-0.20260325175353-2b287e071df5
-	github.com/bufbuild/buf v1.68.2
+	github.com/bufbuild/buf v1.68.4
 	github.com/google/go-containerregistry v0.21.5
 	github.com/google/go-github/v72 v72.0.0
 	github.com/hashicorp/go-retryablehttp v0.7.8
diff --git a/go.sum b/go.sum
index 23d4a9317..ca94914e9 100644
--- a/go.sum
+++ b/go.sum
@@ -10,8 +10,8 @@ buf.build/go/spdx v0.2.0 h1:IItqM0/cMxvFJJumcBuP8NrsIzMs/UYjp/6WSpq8LTw=
 buf.build/go/spdx v0.2.0/go.mod h1:bXdwQFem9Si3nsbNy8aJKGPoaPi5DKwdeEp5/ArZ6w8=
 buf.build/go/standard v0.1.1-0.20260325175353-2b287e071df5 h1:njYKSWoLiq2i5O7y2bPPU2Yzp7iAU0Wk9KJ2OoAhNiU=
 buf.build/go/standard v0.1.1-0.20260325175353-2b287e071df5/go.mod h1:DQmodNT9EHX94WzUaWiZK+/4EaFa/xZTc1gzfCxZVXU=
-github.com/bufbuild/buf v1.68.2 h1:v5dwGGcyR8bDIsxX56wxb/6AVQgIU/yq1sWGGn0e9uU=
-github.com/bufbuild/buf v1.68.2/go.mod h1:RumqiEsU6fXKUC2sSc7v9yc0Jlw7Dr4qaHNPXy66iyE=
+github.com/bufbuild/buf v1.68.4 h1:NGKgWIcBQOKuWwIPvDqossNC7yy2Iqxx1/wKuATzcuY=
+github.com/bufbuild/buf v1.68.4/go.mod h1:/WQvPDua+cCdXE1iCFUoDSC4NbGvXbGUvsM5MdkHt3E=
 github.com/containerd/stargz-snapshotter/estargz v0.18.2 h1:yXkZFYIzz3eoLwlTUZKz2iQ4MrckBxJjkmD16ynUTrw=
 github.com/containerd/stargz-snapshotter/estargz v0.18.2/go.mod h1:XyVU5tcJ3PRpkA9XS2T5us6Eg35yM0214Y+wvrZTBrY=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=