v0.48.0

✨ What's new

• The go module name is changed to carvel.dev/ytt by @joaopapereira in #878
  • 🚨 For library users 🚨 note that this is a breaking change on this version, no impact for users that only use the binaries

Full Changelog: v0.47.0...v0.48.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.48.0/ytt-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

# Make the binary executable
chmod +x /usr/local/bin/ytt

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.48.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.48.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.48.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

📂 Files Checksum

090dc914c87e5ba5861e37f885f12bac3b15559c183c30d4af2e63ccab03d5f9  ./ytt-linux-amd64
156ba28cd605e126a2f7746a285a8298dd68f08d5e201a0b5a33ae6cc21b9c96  ./ytt-linux-arm64
381903a4dab56ea5190d4c5da3475b10f1e8e3bc6f87d046b096d0698de0f395  ./ytt-windows-amd64.exe
9ac24bf6f7f354182d9304f2abd888681e2c360a3d82664a6664a83b6cf5b324  ./ytt-darwin-amd64
a618e677424161be1293e5cc0e58ccfcf9a382c2600a2d4eb357d072f1d637d4  ./ytt-windows-arm64.exe
ba9024f335c78f9f63ac38375be19a794bb4500470636897721d188e4f854c70  ./ytt-darwin-arm64