Update dependency carvel-dev/kapp to v0.65.4

[renovate]

This PR contains the following updates:

Package	Update	Change
carvel-dev/kapp	patch	0.65.1 → 0.65.4

---

Release Notes

carvel-dev/kapp (carvel-dev/kapp)

v0.65.4

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Allow non-approved MD5 use under GODEBUG=fips140=only by @​sameerforhttps://github.com/carvel-dev/kapp/pull/1133l/1133

Full Changelog: carvel-dev/kapp@v0.65.3...v0.65.4

📂 Files Checksum

bf7df0647d7645572d45185bb8bf6a40dd1e631ff4ee1522bc8ce56db53bd243  ./kapp-linux-amd64
e41693ac3d69e1143c7e5fe870712ca05ed810e1e0bc5b00f77ca22ba0f18ae1  ./kapp-linux-arm64
d2f6a45c09703f2aff01422cc130f00f702094757c17804ab18de4dda2249ada  ./kapp-darwin-amd64
a7ecd6a2ac62fdce02bb40784f2701e2421539e4bae6c3cd58dc8e943170c666  ./kapp-darwin-arm64
e9c0c3e48ba2b3c26380b6a997dcf1798b19147c3e9a11895a4e9c55c52470b0  ./kapp-windows-amd64.exe

v0.65.3

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Changelog

• d6706e15 Bump go (#​1127)

What's Changed

• Bump go by @​praveenrewhttps://github.com/carvel-dev/kapp/pull/1127l/1127

Full Changelog: carvel-dev/kapp@v0.65.2...v0.65.3

📂 Files Checksum

1724da4b62982285b1da696fb0354738e33913b33e59f3787b5c2b5ac7030327  ./kapp-linux-amd64
3092f5050d30460d857e836bb9454aa84aed83db6532947ec2395b61501f2124  ./kapp-windows-amd64.exe
485eb76508c33365780a91831ebbf030b1be93b02d6011935abdaa751328d719  ./kapp-linux-arm64
75c1c9809d3d3c618480be6ffaa00a4650e9792a86c8e561d63d8927828fc0e1  ./kapp-darwin-arm64
cebb31f6b72cd94dc4e1c17b31ba6e4ac70caeb53e4b29aea1fbc1885605e9a7  ./kapp-darwin-amd64

v0.65.2

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's New

• deps: bump ytt and kapp-controller by @​sameerforhttps://github.com/carvel-dev/kapp/pull/1126l/1126

Full Changelog: carvel-dev/kapp@v0.65.1...v0.65.2

📂 Files Checksum

38b0a6eb958210f5db2cf79ee4082adf7b6cf52de983b5364c56d03d898b6439  ./kapp-linux-amd64
0285fd258404b902d3a27d17f7a4ce7a01936edef7a1b822632d13b407afb39d  ./kapp-darwin-arm64
a877a004f8b703218883c3f7140bda216f53b9b9e5b29fecf5cec7d4ad6d85b0  ./kapp-linux-arm64
91bd0bcc041b9ce135d8f119dc8e404bce7f8f7aa1c3b10cb34ac25d88ca2d7f  ./kapp-darwin-amd64
20c42452744622c140dac28c9820405c115974899ea90817325c494855578195  ./kapp-windows-amd64.exe

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.