melange/0.6.3 package update

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>

Author: wolfi-bot

melange.yaml

@@ -1,7 +1,7 @@
 # When bumping the version check if the CVE/GHSA mitigations below can be removed.
 package:
   name: melange
-  version: 0.6.2
+  version: 0.6.3
   epoch: 0
   description: build APKs from source code
   copyright:
@@ -22,7 +22,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: e957ab1c612bc7d3a3d7d55d191368151923275f
+      expected-commit: 5f1f44cb1b9acd30cce2dafe4c06391b9ba9cbbc
       repository: https://github.com/chainguard-dev/melange
       tag: v${{package.version}}