Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump github.com/vmware-tanzu/carvel-kapp-controller from 0.50.1 to 0.…
…50.2 (#7616) Bumps [github.com/vmware-tanzu/carvel-kapp-controller](https://github.com/vmware-tanzu/carvel-kapp-controller) from 0.50.1 to 0.50.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vmware-tanzu/carvel-kapp-controller/releases">github.com/vmware-tanzu/carvel-kapp-controller's releases</a>.</em></p> <blockquote> <h2>v0.50.2</h2> <h1>:sparkles: What's new</h1> <ul> <li>Bumping etcd to 3.5.9 in v0.50.x line by <a href="https://github.com/sethiyash"><code>@sethiyash</code></a> in <a href="https://redirect.github.com/carvel-dev/kapp-controller/pull/1507">carvel-dev/kapp-controller#1507</a></li> <li>Bumping helm to v3.14.3 in v0.50.x line by <a href="https://github.com/sethiyash"><code>@sethiyash</code></a> in <a href="https://redirect.github.com/carvel-dev/kapp-controller/pull/1514">carvel-dev/kapp-controller#1514</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/carvel-dev/kapp-controller/compare/v0.50.0...v0.50.2">https://github.com/carvel-dev/kapp-controller/compare/v0.50.0...v0.50.2</a></p> <!-- raw HTML omitted --> <h2>Installation of kctrl</h2> <h4>By downloading binary from the release</h4> <p>For instance, if you are using Linux on an AMD64 architecture:</p> <pre lang="shell"><code># Download the binary curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/kctrl-linux-amd64 # Move the binary in to your PATH mv kctrl-linux-amd64 /usr/local/bin/kctrl # Make the binary executable chmod +x /usr/local/bin/kctrl </code></pre> <h4>Via Homebrew (macOS or Linux)</h4> <pre lang="shell"><code>$ brew tap carvel-dev/carvel $ brew install kctrl $ kctrl version </code></pre> <h2>Verify checksums file signature</h2> <p>Install cosign on your system <a href="https://docs.sigstore.dev/system_config/installation/">https://docs.sigstore.dev/system_config/installation/</a></p> <p>The checksums file provided within the artifacts attached to this release is signed using <a href="https://docs.sigstore.dev/cosign/overview/">Cosign</a> with GitHub OIDC. To validate the signature of this file, run the following commands:</p> <pre lang="shell"><code># Download the checksums file, certificate, and signature curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/checksums.txt curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/checksums.txt.pem curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/checksums.txt.sig <h3>Verify the checksums file</h3> <p>cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=<a href="https://github.com/carvel-dev">https://github.com/carvel-dev</a> --certificate-oidc-issuer=<a href="https://token.actions.githubusercontent.com">https://token.actions.githubusercontent.com</a> </code></pre></p> <h3>Verify binary integrity</h3> <p>To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/carvel-dev/kapp-controller/commit/209dc6716dbe0ef7058cffc3eb5b8077d69f8968"><code>209dc67</code></a> Docker buildx with k8s without specifying endpoint argument</li> <li>See full diff in <a href="https://github.com/vmware-tanzu/carvel-kapp-controller/compare/v0.50.1...v0.50.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information
1 parent
da836de
commit 67e09be