diff --git a/go.mod b/go.mod
index 5fcd9119..dac16269 100644
--- a/go.mod
+++ b/go.mod
@@ -23,7 +23,6 @@ require (
 	k8s.io/apiextensions-apiserver v0.29.3
 	k8s.io/apimachinery v0.29.3
 	k8s.io/client-go v0.29.3
-	k8s.io/utils v0.0.0-20240310230437-4693a0247e57
 	sigs.k8s.io/controller-runtime v0.16.5
 )
 
@@ -96,6 +95,7 @@ require (
 	k8s.io/component-base v0.29.3 // indirect
 	k8s.io/klog/v2 v2.110.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
+	k8s.io/utils v0.0.0-20240310230437-4693a0247e57 // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
diff --git a/pkg/nftables/networkpolicy_test.go b/pkg/nftables/networkpolicy_test.go
index e4815671..2848f9e8 100644
--- a/pkg/nftables/networkpolicy_test.go
+++ b/pkg/nftables/networkpolicy_test.go
@@ -8,10 +8,10 @@ import (
 	corev1 "k8s.io/api/core/v1"
 	networking "k8s.io/api/networking/v1"
 	"k8s.io/apimachinery/pkg/util/intstr"
-	"k8s.io/utils/pointer"
 
 	firewallv1 "github.com/metal-stack/firewall-controller/v2/api/v1"
 	"github.com/metal-stack/firewall-controller/v2/pkg/nftables/mocks"
+	"github.com/metal-stack/metal-lib/pkg/pointer"
 )
 
 func port(p int) *intstr.IntOrString {
@@ -62,7 +62,7 @@ func TestClusterwideNetworkPolicyRules(t *testing.T) {
 								{
 									Protocol: &tcp,
 									Port:     port(443),
-									EndPort:  pointer.Int32(448),
+									EndPort:  pointer.Pointer(int32(448)),
 								},
 							},
 						},
@@ -83,7 +83,7 @@ func TestClusterwideNetworkPolicyRules(t *testing.T) {
 								{
 									Protocol: &tcp,
 									Port:     port(443),
-									EndPort:  pointer.Int32(448),
+									EndPort:  pointer.Pointer(int32(448)),
 								},
 							},
 						},