diff --git a/go.mod b/go.mod
index ca8e6ad8..f670b0fa 100644
--- a/go.mod
+++ b/go.mod
@@ -12,7 +12,7 @@ replace modernc.org/sqlite v1.33.0 => modernc.org/sqlite v1.32.0
 
 require (
 	chainguard.dev/apko v0.20.1
-	chainguard.dev/melange v0.17.0
+	chainguard.dev/melange v0.17.2
 	cloud.google.com/go/storage v1.47.0
 	github.com/adrg/xdg v0.5.3
 	github.com/anchore/grype v0.85.0
diff --git a/go.sum b/go.sum
index fb329b7e..948107db 100644
--- a/go.sum
+++ b/go.sum
@@ -4,8 +4,8 @@ chainguard.dev/apko v0.20.1 h1:s5OSmMm6EnoRBtEGbE+5knJiFdPUXBfCs+92CwdLYRA=
 chainguard.dev/apko v0.20.1/go.mod h1:apcXdkgm/iRLHP4ELxgEWiijpNzA8vNEv5P94sw/z3w=
 chainguard.dev/go-grpc-kit v0.17.7 h1:TqHua7er5k8m6WM96y0Tm7IoLLkuZ5vh3+5SR1gruKg=
 chainguard.dev/go-grpc-kit v0.17.7/go.mod h1:JroMzTY9mdhKe/bvtyChgfECaNh80+bMZH3HS+TGXHw=
-chainguard.dev/melange v0.17.0 h1:07C8CV5b2aifbAAidGowOtcAdgKuscCXfhxiLaY6KPA=
-chainguard.dev/melange v0.17.0/go.mod h1:vg4Aq/GSdPfe//q4qradlQ0tFYsG3Ts4o3wJclcjxfk=
+chainguard.dev/melange v0.17.2 h1:goqq2pdm5M36ZjmXUGlaUrCvxDA53GvfFc6soc3mJV8=
+chainguard.dev/melange v0.17.2/go.mod h1:vg4Aq/GSdPfe//q4qradlQ0tFYsG3Ts4o3wJclcjxfk=
 chainguard.dev/sdk v0.1.28 h1:xLQv0JxiGhqVKOL059DmTReTjrKFhUsP5U1W6cgr+jQ=
 chainguard.dev/sdk v0.1.28/go.mod h1:9EvGI9GY5UPDbZ5AhGbMO8865ixNu36afQYCZ5M95NM=
 cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=