diff --git a/go.mod b/go.mod
index dc1e4aab..f31daef8 100644
--- a/go.mod
+++ b/go.mod
@@ -35,7 +35,7 @@ require (
 	github.com/sanity-io/litter v1.5.5
 	github.com/sirupsen/logrus v1.9.3
 	github.com/spf13/viper v1.18.2
-	github.com/twpayne/go-vfs/v4 v4.3.0 // v5 requires go1.20
+	github.com/twpayne/go-vfs/v5 v5.0.4 // v5 requires go1.20
 	github.com/urfave/cli/v2 v2.27.1
 	golang.org/x/net v0.24.0
 	golang.org/x/oauth2 v0.19.0
@@ -44,7 +44,10 @@ require (
 	k8s.io/mount-utils v0.27.4
 )
 
-require github.com/google/go-github/v40 v40.0.0
+require (
+	github.com/google/go-github/v40 v40.0.0
+	github.com/twpayne/go-vfs/v4 v4.3.0
+)
 
 require (
 	atomicgo.dev/cursor v0.2.0 // indirect
diff --git a/go.sum b/go.sum
index 7408e98f..2f484f27 100644
--- a/go.sum
+++ b/go.sum
@@ -566,6 +566,7 @@ github.com/tredoe/osutil/v2 v2.0.0-rc.16 h1:5A2SKvyB2c3lhPYUIHyFtu6jbaXlaA3Hu5gW
 github.com/tredoe/osutil/v2 v2.0.0-rc.16/go.mod h1:uLRVx/3pb7Y4RQhG8cQFbPE9ha5r81e6MXpBsxbTAYc=
 github.com/twpayne/go-vfs/v4 v4.3.0 h1:rTqFzzOQ/6ESKTSiwVubHlCBedJDOhQyVSnw8rQNZhU=
 github.com/twpayne/go-vfs/v4 v4.3.0/go.mod h1:tq2UVhnUepesc0lSnPJH/jQ8HruGhzwZe2r5kDFpEIw=
+github.com/twpayne/go-vfs/v5 v5.0.4/go.mod h1:zTPFJUbgsEMFNSWnWQlLq9wh4AN83edZzx3VXbxrS1w=
 github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGrc=
 github.com/ulikunitz/xz v0.5.10/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
 github.com/ulikunitz/xz v0.5.11 h1:kpFauv27b6ynzBNT/Xy+1k+fK4WswhN/6PN5WhFAGw8=