diff --git a/k3s-1.33.yaml b/k3s-1.33.yaml
index cafd4aa921e6..765a053b2602 100644
--- a/k3s-1.33.yaml
+++ b/k3s-1.33.yaml
@@ -1,7 +1,7 @@
 package:
   name: k3s-1.33
   version: "1.33.5.1"
-  epoch: 0
+  epoch: 1 # GHSA-47m2-4cr7-mhcw
   description:
   copyright:
     - license: Apache-2.0
@@ -64,6 +64,9 @@ pipeline:
     with:
       deps: |-
         github.com/pion/interceptor@v0.1.39
+        github.com/quic-go/quic-go@v0.54.1
+        github.com/quic-go/webtransport-go@v0.9.0
+        github.com/libp2p/go-libp2p@v0.44.0
 
   # Build things (almost) identical to upstream, with the k3s components
   # embedded in the "outer" multicall binary.