Skip to content

chore(deps): update dependency carvel-dev/ytt to v0.51.1#637

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/carvel-dev-ytt-0.x
Dec 11, 2024
Merged

chore(deps): update dependency carvel-dev/ytt to v0.51.1#637
renovate[bot] merged 1 commit intomainfrom
renovate/carvel-dev-ytt-0.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 11, 2024

This PR contains the following updates:

Package Update Change
carvel-dev/ytt patch v0.51.0 -> v0.51.1

Release Notes

carvel-dev/ytt (carvel-dev/ytt)

v0.51.1

Compare Source

Installation and signature verification

Installation
By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

### Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.1/ytt-linux-amd64

### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

### Make the binary executable
chmod +x /usr/local/bin/ytt
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version  
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.1/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

  • Bump golang to 1.23.3 by @​devanshuVmware in #​937

Full Changelog: carvel-dev/ytt@v0.51.0...v0.51.1

📂 Files Checksum

026a12ee7108ff2d1150eb1347d544367d92e993ade7b2d2727c4c8d13a47a6b  ./ytt-linux-amd64
1d6e054b9fb237ca18943b870a4c99b46503b79e6f8bc698be2b06cc414225b1  ./ytt-darwin-arm64
455ea8a02f6fa3ae7e885fb06977c653c758fd65dd79f94954114eb4a7cd39fe  ./ytt-windows-arm64.exe
55849cab41cf7780b0d26da416395cf77576a434a4bcf883b0e2a29944325e7c  ./ytt-linux-arm64
833dda4d66e1d16d97dd8435140205587ddee6de25de3e1bf2d8766ad071e574  ./ytt-darwin-amd64
c2a918ab38781dccd48e7ee5c87f2d78ecce6bb8a47c957e087d689fd555c6d0  ./ytt-windows-amd64.exe

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/carvel-dev-ytt-0.x branch from 354791f to 54adf19 Compare December 11, 2024 11:45
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GoGitOps Review

Grade: A+ (100.0%)

Files: 21

Issues: 0

gofmt: 100%

go_vet: 100%

gocyclo: 100%

golint: 100%

ineffassign: 100%

license: 100%

misspell: 100%

This report was generated using GoGitOps.

@renovate renovate bot merged commit 2209ad6 into main Dec 11, 2024
@renovate renovate bot deleted the renovate/carvel-dev-ytt-0.x branch December 11, 2024 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants