Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update k8s related bumps #106

Merged
merged 2 commits into from
Sep 5, 2024
Merged

chore(deps): update k8s related bumps #106

merged 2 commits into from
Sep 5, 2024

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Jul 8, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
k14s/kapp minor 0.62.1 -> 0.63.3
k14s/ytt minor 0.49.1 -> 0.50.0
kudobuilder/kuttl minor 0.17.0 -> 0.19.0
mikefarah/yq patch 4.44.2 -> 4.44.3

To easily extract checksums: yq_version=;curl -sSL https://github.com/mikefarah/yq/releases/download/v${jq_version}/checksums |grep "yq_linux_amd64 "|cut -d' ' -f37

Release Notes

k14s/kapp (k14s/kapp)

v0.63.3

Compare Source

Installation and signature verification
Installation
By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/kapp-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

##### Make the binary executable
chmod +x /usr/local/bin/kapp
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
✨ What's new
  • Fixing CVE by @​rohitagg2020 in #​1010

Full Changelog: carvel-dev/kapp@v0.63.2...v0.63.3

📂 Files Checksum
0007ec49c089f332b8c3a5dcdf5c0587e63afe1609857e28ea961cea8533e6e7  ./kapp-darwin-arm64
04accaa9a8d8a8fda12a47a3f22d5f16a1738b3088c1467af03c082aee7979f5  ./kapp-windows-amd64.exe
33702a40b6032ada742d73c59afeb393d0830a1913e3a599ca995eba3e68a57e  ./kapp-linux-amd64
46b9961d8998c4a797ea3d648b83cf18be616945b48119d0b1e7a66813dc3658  ./kapp-darwin-amd64
dbdfa194067c420b5e5ed36cb99f008c9a2dec05f5aeebe770b854898d3de2c4  ./kapp-linux-arm64

v0.63.2

Compare Source

Installation and signature verification
Installation
By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/kapp-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

##### Make the binary executable
chmod +x /usr/local/bin/kapp
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
✨ What's new
  • Bump go version to 1.22.5 by @​devanshuVmware in #​985
New Contributors

Full Changelog: carvel-dev/kapp@v0.63.1...v0.63.2

📂 Files Checksum
65084088d51fa0a43a31c71da175e8158844f776e2d2731f89cc51787823ed2d  ./kapp-darwin-amd64
7b747f0107481b3b9faf8d2cac29126fb1a2aeb028cf33a551c67d8e7a6f075f  ./kapp-darwin-arm64
d760b51d8e9e3f5d0847e84fad05a51d1415fcfe309e10f885edd51d3e8c1301  ./kapp-linux-amd64
e68f3c87cd7ad0af361bef633f621e677ac53d17c946f4d40d7c12a31156bd51  ./kapp-windows-amd64.exe
f499fa48f42509e8e4e492c5f68126205319529e34b98249adbfb082a31b37db  ./kapp-linux-arm64

v0.63.1

Compare Source

Installation and signature verification
Installation
By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/kapp-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

##### Make the binary executable
chmod +x /usr/local/bin/kapp
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
✨ What's new
  • Add change validation for maximum constraints to CRD Upgrade safety preflight check by @​rashmigottipati in #​951
  • Add configuration to permissions pre-flight check to use SelfSubjectAccessReview or SelfSubjectRulesReview by @​everettraven in #​931
  • Add handling of updates to default values to the CRD Upgrade Safety preflight check by @​rashmigottipati in #​950
  • Add handling of updates to required fields to the CRD Upgrade Safety preflight check by @​rashmigottipati in #​933
  • Allow custom wait rules for kapp-controller resources by @​praveenrewar in #​932
  • Do not remove usedGKs when all resources are deleted by @​praveenrewar in #​928
  • Make fields of Resource Filter Flags accessible outside the package by @​rohitagg2020 in #​941
  • Update cron-job apiversion by @​jmcudd in #​947
  • Add validation for changes to minimum constraints for CRD fields by @​everettraven in #​944
New Contributors

Full Changelog: carvel-dev/kapp@v0.62.0...v0.63.1

📂 Files Checksum
2bdd36a64c1d40ac9666cf8fe64e89bd2064d31989f837a6c15ef4198a896799  ./kapp-darwin-arm64
3eed107de438378b35e619b37791512984e870e7e647fea312226a0e6fc9cd43  ./kapp-linux-amd64
8ad9d09844fd0710537190e1743b8fbcbe02b05f8180151e3420908120731071  ./kapp-darwin-amd64
aa8874eb186344601e4ff695de6406b06324039061c301cffd4a039618c021b9  ./kapp-windows-amd64.exe
fecd32c9760da68791e591afffd53ce0a935471bf40d1e3fd941e602d7becb04  ./kapp-linux-arm64
k14s/ytt (k14s/ytt)

v0.50.0

Compare Source

Installation and signature verification
Installation
By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/ytt-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

##### Make the binary executable
chmod +x /usr/local/bin/ytt
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
What's Changed
  • Bump golang to 1.22.5 by @​devanshuVmware in #​923
  • Print full path rather than RelativePath only by @​ernstvonoelsen in #​903
New Contributors

Full Changelog: carvel-dev/ytt@v0.49.0...v0.50.0

📂 Files Checksum

01bbd9490c48309909ef7e314fcaf284667017c31321dc4edc30e2edf0dfa1c1  ./ytt-windows-arm64.exe
4067a41d44d977b5bd492c227ae9cc62d803df788ec9f4d612f89090eb01e946  ./ytt-windows-amd64.exe
61dec6e00131f990db853afc4b7531c318bd3af3ba18f2cfdbc0d5e83a45c445  ./ytt-linux-amd64
d79f0b4189403c4142f5c646989de0769a316896a6096dfd1719605d313e8d1e  ./ytt-darwin-amd64
f38290c2666ddcf6feb4907f91033c4f41022b3fb84893c42d1f48948597b82a  ./ytt-linux-arm64
f3ce72031d34f0a3d909b1c971017bb3788bb786d3bb5cba1bf6d699255be643  ./ytt-darwin-arm64
kudobuilder/kuttl (kudobuilder/kuttl)

v0.19.0: kuttl-v0.19.0

Compare Source

Changes
🚀 Highlights
  • feat: add user impersonation to all commands (#​549)
🐛 Bug Fixes
  • Make it possible to build with Go 1.23. (#​548)
🌱 Dependency bumps
  • Bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 (#​555)
  • Bump sigs.k8s.io/controller-tools from 0.16.1 to 0.16.2 in the kubernetes group (#​554)
  • Bump github.com/docker/docker from 27.1.2+incompatible to 27.2.0+incompatible (#​556)
  • Bump github.com/docker/docker from 27.1.1+incompatible to 27.1.2+incompatible (#​551)
  • Bump the kubernetes group with 8 updates (#​550)
  • Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible (#​545)
  • Bump the kubernetes group with 5 updates (#​544)
Contributors

@​dependabot, @​dependabot[bot], @​logan-bobo and @​porridge

v0.18.0: kuttl-v0.18.0

Compare Source

🚀 Highlights
  • feat: add lazy loading kubeconfigs for Test Steps (#​540)
🌱 Dependency bumps
  • Bump github.com/docker/docker from 24.0.9+incompatible to 27.0.3+incompatible (#​534 #​538 #​543)
  • Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#​537)
  • Bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.1 (#​536)
  • Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#​535)
  • Bump the kubernetes group with 7 updates (#​533)
  • Bump k8s dependencies and group them. (#​529)
  • Bump github.com/stretchr/testify from 1.8.2 to 1.9.0 (#​528)
Other Changes
  • chore: fix bug label not being auto-added (#​542)
  • A couple more release doc updates. (#​523)
  • Create dependabot.yml (#​522)
Contributors

@​dependabot, @​dependabot[bot], @​kumar-mallikarjuna and @​porridge

mikefarah/yq (mikefarah/yq)

v4.44.3

Compare Source

  • Fixed upper-case file extension detection, Thanks @​ryenus (#​2121)
    • Log printing follow no-colors flag #​2082
    • Skip and warn when interpolating strings and theres a unclosed bracket #​2083
    • Fixed CSV content starting with # issue #​2076
    • Bumped dependencies

Configuration

📅 Schedule: Branch creation - "after 1pm on Monday,before 4pm on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/k8s-related-bumps branch from 0ccd018 to d866940 Compare July 8, 2024 07:43
@renovate renovate bot changed the title chore(deps): update dependency k14s/kapp to v0.63.1 chore(deps): update k8s related bumps Jul 8, 2024
@renovate renovate bot force-pushed the renovate/k8s-related-bumps branch 2 times, most recently from 18e5045 to 6871ea7 Compare July 17, 2024 14:19
@renovate renovate bot force-pushed the renovate/k8s-related-bumps branch from 6871ea7 to 13b272f Compare August 5, 2024 07:55
@renovate renovate bot force-pushed the renovate/k8s-related-bumps branch 5 times, most recently from 0e6b7ef to 2d03af0 Compare September 5, 2024 15:16
@o-orand o-orand force-pushed the renovate/k8s-related-bumps branch from 2d03af0 to 0e6b7ef Compare September 5, 2024 15:26
@renovate Renovate
Copy link
Author

renovate bot commented Sep 5, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@o-orand o-orand force-pushed the renovate/k8s-related-bumps branch from 0e6b7ef to d8f21d3 Compare September 5, 2024 15:59
@o-orand o-orand merged commit a1920a8 into main Sep 5, 2024
8 checks passed
@o-orand o-orand deleted the renovate/k8s-related-bumps branch September 5, 2024 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@o-orand o-orand

Labels
datasource/github-releases depName/k14s-kapp manager/regex
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@o-orand