diff --git a/sigstore-scaffolding.yaml b/sigstore-scaffolding.yaml
index b31fa61975b..e1d6a912153 100644
--- a/sigstore-scaffolding.yaml
+++ b/sigstore-scaffolding.yaml
@@ -1,7 +1,7 @@
 package:
   name: sigstore-scaffolding
-  version: 0.7.17
-  epoch: 2
+  version: 0.7.18
+  epoch: 0
   description: Software Supply Chain Transparency Log
   copyright:
     - license: Apache-2.0
@@ -38,11 +38,7 @@ pipeline:
     with:
       repository: https://github.com/sigstore/scaffolding
       tag: v${{package.version}}
-      expected-commit: 0fb6c1e4d34c1d40f58a00da8380b7d5fa65a04c
-
-  - uses: go/bump
-    with:
-      deps: golang.org/x/crypto@v0.31.0 golang.org/x/net@v0.33.0
+      expected-commit: ac5904bca55cc2f010fe6d5643fc5464393d0b4a
 
 subpackages:
   - range: components