diff --git a/melange.yaml b/melange.yaml
index 898c2cd1472..675e2942f44 100644
--- a/melange.yaml
+++ b/melange.yaml
@@ -1,7 +1,7 @@
 # When bumping the version check if the CVE/GHSA mitigations below can be removed.
 package:
   name: melange
-  version: 0.6.1
+  version: 0.6.2
   epoch: 0
   description: build APKs from source code
   copyright:
@@ -22,7 +22,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: ec07bfbdff97042f5830e0026f30d96d6c188291
+      expected-commit: e957ab1c612bc7d3a3d7d55d191368151923275f
       repository: https://github.com/chainguard-dev/melange
       tag: v${{package.version}}