roxctl: fix checksum for 4.6.2

[stefanb]

• Have you followed the guidelines for contributing?
• Have you ensured that your commits follow the commit style guide?
• Have you checked that there aren't other open pull requests for the same formula update/change?
• Have you built your formula locally with HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>, where <formula> is the name of the formula you're submitting?
• Is your test running fine brew test <formula>, where <formula> is the name of the formula you're submitting?
• Does your build pass brew audit --strict <formula> (after doing HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>)? If this is a new formula, does it pass brew audit --new <formula>?

---

found in

• go 1.24.0, [email protected] 1.23.6 (new formula) #201070

Tag moving evidence https://github.com/stackrox/stackrox/actions/workflows/release-ci.yaml:

matches the timeline.

[daeho-ro]

https://github.com/stackrox/stackrox/actions?query=branch:4.6.2

The commit for version tag is changed.

[SMillerDev]

Did we also confirm this as intentional? Because that's the main problem, the tag moving can just as well be malicious.

[stefanb]

Diff between commits where tag was moved does not seem malicious:
stackrox/stackrox@90eec18...ecff2a4 (fixed commit sha)
stackrox/stackrox@90eec18...4.6.2 (based on current tag position)

[SMillerDev]

Upstream confirmed this was intentional

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.