diff --git a/melange.yaml b/melange.yaml
index 3a1c17dbd38..7cee541d519 100644
--- a/melange.yaml
+++ b/melange.yaml
@@ -1,7 +1,7 @@
 # When bumping the version check if the CVE/GHSA mitigations below can be removed.
 package:
   name: melange
-  version: 0.5.9
+  version: 0.5.10
   epoch: 0
   description: build APKs from source code
   copyright:
@@ -22,7 +22,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: a298935850e80ecdb2e05c094ac507939b2bca47
+      expected-commit: 93fe476847e22d8678bc141149e8bd1a3614bcee
       repository: https://github.com/chainguard-dev/melange
       tag: v${{package.version}}