Merge pull request #14501 from wolfi-dev/cve-melange-4c9e49e57474a910…

…88e20755cfc60895

melange/0.6.9-r1: cve remediation

melange.yaml

@@ -2,7 +2,7 @@
 package:
   name: melange
   version: 0.6.9
-  epoch: 1
+  epoch: 2
   description: build APKs from source code
   copyright:
     - license: Apache-2.0
@@ -26,6 +26,10 @@ pipeline:
       repository: https://github.com/chainguard-dev/melange
       tag: v${{package.version}}
 
+  - uses: go/bump
+    with:
+      deps: gopkg.in/go-jose/go-jose.v2@v2.6.3
+
   - runs: |
       make melange
       install -m755 -D ./melange "${{targets.destdir}}"/usr/bin/melange