diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 1e2d8fa..79a4ebd 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: 1.26.0
+          go-version: 1.26.3
 
       - name: Cache Go modules
         uses: actions/cache@v5
diff --git a/go.mod b/go.mod
index 639b4d7..31fcb38 100644
--- a/go.mod
+++ b/go.mod
@@ -4,12 +4,12 @@ go 1.24.4
 
 require (
 	github.com/CycloneDX/cyclonedx-go v0.10.0
-	github.com/google/sbom-conformance v0.0.0-20260210172242-74c24d432975
+	github.com/google/sbom-conformance v0.0.0-20260302161028-7cb62184ea06
 	github.com/spdx/tools-golang v0.5.7
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
 	github.com/stretchr/testify v1.11.1
-	k8s.io/klog/v2 v2.130.1
+	k8s.io/klog/v2 v2.140.0
 )
 
 require (
diff --git a/go.sum b/go.sum
index 40381de..e950a46 100644
--- a/go.sum
+++ b/go.sum
@@ -11,8 +11,8 @@ github.com/go-logr/logr v1.4.1 h1:pKouT5E8xu9zeFC39JXRDukb6JFQPXM5p5I91188VAQ=
 github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/sbom-conformance v0.0.0-20260210172242-74c24d432975 h1:jqUh9W560jt3gKjFnNYDlzrxPJBWZNWc/c0/MDSii/w=
-github.com/google/sbom-conformance v0.0.0-20260210172242-74c24d432975/go.mod h1:Y6Jl+ar289Z7cc3z8jL6wYnl1rYcttgXT9Y5ciHEEAM=
+github.com/google/sbom-conformance v0.0.0-20260302161028-7cb62184ea06 h1:IlvimIlIkBUgLaBq9J2OTAhluKREviVbHAPiS14aYc4=
+github.com/google/sbom-conformance v0.0.0-20260302161028-7cb62184ea06/go.mod h1:Y6Jl+ar289Z7cc3z8jL6wYnl1rYcttgXT9Y5ciHEEAM=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
@@ -45,7 +45,7 @@ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
-k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
+k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
+k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
 sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
 sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=