Skip to content

Commit

Permalink
chore(deps): update dependency carvel-dev/ytt to v0.47.0 (#223)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [carvel-dev/ytt](https://togithub.com/carvel-dev/ytt) | minor |
`v0.46.3` -> `v0.47.0` |

---

### Release Notes

<details>
<summary>carvel-dev/ytt (carvel-dev/ytt)</summary>

###
[`v0.47.0`](https://togithub.com/carvel-dev/ytt/releases/tag/v0.47.0)

[Compare
Source](https://togithub.com/carvel-dev/ytt/compare/v0.46.3...v0.47.0)

<details>

<summary><h2>Installation and signature verification</h2></summary>

##### Installation
##### By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/ytt-linux-amd64

### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

### Make the binary executable
chmod +x /usr/local/bin/ytt
```

##### Via Homebrew (macOS or Linux)

```shell
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version  
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub
OIDC(Refer [this](https://docs.sigstore.dev/system_config/installation/)
page for cosign installation). To validate the signature of this file,
run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature.

```shell

### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```

</details>

#### What's Changed
* sign release artifacts using cosign by
@&#8203;prashantrew[carvel-dev/ytt#887
* Bump go version to 1.21.6 by
@&#8203;sethiya[carvel-dev/ytt#888

#### New Contributors
* @&#8203;prashantrewar made their first
contributi[carvel-dev/ytt#887

**Full Changelog**:
carvel-dev/ytt@v0.46.0...v0.47.0

### πŸ“‚ Files Checksum

4c37056702d842570b0bce2f461f494902a2fbd8d83ef1ded224d0def1f04ccb
./ytt-windows-arm64.exe
67b7cb20273cb00d36bda38888277c1b0e74992a422c771d28e7a9c2045da798
./ytt-windows-amd64.exe
700dbb362a73950d779cf298ba191de2a35394fa68bf19e74add5e7384b2875a
./ytt-darwin-amd64
aec0bf2b5ca7dc98dd04444135738d0a1add18fcc1294c258eb8f1061b3eb9ec
./ytt-darwin-arm64
de2dd0a659fd12b2d80e00fa2a4a9316db67e0372e79c3bf48586ea53201180e
./ytt-linux-amd64
f12dc884af6be46a56c4233cbe456e90d8082d4699c0412d4adfaaae68712f4d
./ytt-linux-arm64

</details>

---

### Configuration

πŸ“… **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

β™» **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

πŸ”• **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log [here](https://developer.mend.io/github/mykso/myks).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMzUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEzNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: German Lashevich <[email protected]>
  • Loading branch information
renovate[bot] and Zebradil committed Jan 21, 2024
1 parent 1cf907f commit aa18392
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ FROM downloader AS ytt
ARG TARGETOS
ARG TARGETARCH
# renovate: datasource=github-releases depName=carvel-dev/ytt
ARG YTT_VERSION=v0.46.3
ARG YTT_VERSION=v0.47.0
RUN curl -fsSL \
https://github.com/carvel-dev/ytt/releases/download/${YTT_VERSION}/ytt-${TARGETOS}-${TARGETARCH} \
> ytt
Expand Down

0 comments on commit aa18392

Please sign in to comment.