diff --git a/snyk-cli.yaml b/snyk-cli.yaml
index bd8159ded06..534ca592fe7 100644
--- a/snyk-cli.yaml
+++ b/snyk-cli.yaml
@@ -1,6 +1,6 @@
 package:
   name: snyk-cli
-  version: "1.1296.2"
+  version: "1.1297.0"
   epoch: 0
   description: Snyk CLI scans and monitors your projects for security vulnerabilities
   copyright:
@@ -30,10 +30,15 @@ pipeline:
     with:
       repository: https://github.com/snyk/cli
       tag: v${{package.version}}
-      expected-commit: e38ac9984b485c07ce7ce61cb289e8898edef828
+      expected-commit: 1fcd6de570e7f40c091e4622adeec8947fdef5ab
 
   - runs: git checkout -b release/wolfi # This is so the determine-release-channel.sh script decides the to use the correct channel and not create a -dev version
 
+  - uses: go/bump
+    with:
+      modroot: cliv2
+      replaces: github.com/whilp/git-urls=github.com/chainguard-dev/git-urls@v1.0.2
+
   - runs: |
       # Write our version so `make build` doesn't produce an incorrectly-bumped one
       echo "${{package.version}}" > binary-releases/version