diff --git a/melange.yaml b/melange.yaml
index 2e5e7a8e9a7..b1d382d345c 100644
--- a/melange.yaml
+++ b/melange.yaml
@@ -1,7 +1,7 @@
 # When bumping the version check if the CVE/GHSA mitigations below can be removed.
 package:
   name: melange
-  version: 0.6.6
+  version: 0.6.7
   epoch: 0
   description: build APKs from source code
   copyright:
@@ -22,7 +22,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 0eb18bd438fdd0327060e41cf65bdb59f5ceaf36
+      expected-commit: d374c92f36cb4e3fb245f7300becb01b720d7057
       repository: https://github.com/chainguard-dev/melange
       tag: v${{package.version}}