Releases: carvel-dev/ytt
Release list
v0.55.2
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Bump go to v1.26.3 by @sameerforge in #988
- Bump OSS components github.com/hashicorp/go-version to v1.7.0 and github.com/BurntSuhi/toml to v1.5.0 by @G-Gobi in #993
- Reduce allocation size when emitting yaml by @emh-jump in #995
- Allow md5.sum() to run under strict FIPS 140-3 enforcement by @sameerforge in #1001
New Contributors
Full Changelog: v0.55.1...v0.55.2
📂 Files Checksum
270f4446e8aefe6c73e5ac1901f60eb325213a9ba4d654c66bc028a1ec6056f8 ./ytt-windows-arm64.exe
7ca5bc2c8f7f854ac88d2e66c9ffd4a13439597fc2c32b342691e46a488318eb ./ytt-windows-amd64.exe
32aa25be4f624d202059d82890f986ef96100ce7b031b17e3d5ce3298094cc25 ./ytt-linux-riscv64
6b09566cd9cbe90050c8685889aa1eef050c3f1168809df2486062e8a3ed1ec0 ./ytt-linux-arm64
512cc21193d3b0ce307b6e8db6ba8d40831f16e02526e1c753416456ea4319af ./ytt-linux-amd64
4a61ebc3cace9ed6c1f2d4cc7285589e85c58869d96bc36cb0d09987ec14fcd1 ./ytt-darwin-arm64
b7b8435cd5cca719b933b0bc846a0f872bd2ed0c68fa9b74ec8369bef2ac0987 ./ytt-darwin-amd64
v0.55.1
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.1/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.1/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.1/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- chore(deps): upgrade Go to 1.26.3 and bump CLI utility libraries by @sameerforge in #989
- fix: Fix incorrect markdown in README.md by @moijes12 in #990
New Contributors
Full Changelog: v0.55.0...v0.55.1
📂 Files Checksum
82086af6ab159120320bb7864dea27eb701656ef7f8c247b0e7bcbb5efabe214 ./ytt-windows-arm64.exe
6aee93963dfc8c89d0c63dc8300e0ed4fa7163bd7972fbefca4fb7e25b0c4170 ./ytt-linux-riscv64
ce61f7aee3f66f9b78d5781ef8528b7c8e199a2747796ef17a954118d3e65724 ./ytt-linux-arm64
3a2c925ed222f8db4956946d40279688edd6ceb3e919f03f919a8fc8b8532eda ./ytt-linux-amd64
1649a42b19cdf611b033646951313b0ed3210383d05615bb11b2833b051ac771 ./ytt-windows-amd64.exe
cf4d4afcf32e5cab1ba55a74f436c7e4bd04326c168a11be17078162629100e9 ./ytt-darwin-arm64
b6a946878b74883c093bcc3e93960c68a6058a7e2be6ee2c78f1ba5f80fe3c02 ./ytt-darwin-amd64
v0.55.0
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.0/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.0/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing-
What's Changed
- e6840e5 build(deps): update cobra to v1.10.2
Full Changelog: v0.54.0...v0.55.0
📂 Files Checksum
6790107d175b226d6544e8bc4cc539c96ae34421f8814f1094ea3086856ac98d ./ytt-windows-arm64.exe
28a965a254f2cfccbbd8f8d3235e97e236cb4f9bcb2bf962ae31801e13902095 ./ytt-linux-riscv64
14e0a83a793c04bd26b2a2328f6df169b38ddf24257a64ffde23038f4ecab0bf ./ytt-linux-arm64
013adf9ed2fbd392b9861e5ec34015dabfcfa2e82da9e8cc0ee1e5c6a7f9b64b ./ytt-linux-amd64
2700688d6b0de335631e518b73131c8732911f4ab372d69b912c44799954176b ./ytt-windows-amd64.exe
76c2d8f958568ceabe927d32206d79b779bd8341450d99b78d028ae608d1348b ./ytt-darwin-arm64
6218426752505fffce393a18eb700e7ddb2ddcc1c8ad521d02101bdb9db2f7f6 ./ytt-darwin-amd64
v0.54.0
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.54.0/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.54.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.54.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.54.0/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
Full Changelog: v0.53.2...v0.54.0
📂 Files Checksum
0ea235e08c5c828c37acf2717893cd1fdbc35e0ae25c93c47c47f51f53cdddaf ./ytt-windows-arm64.exe
1dc1f329583e46c17100cbbc88b7d28274ff99e3c471821ae432c64b6e1b7b42 ./ytt-linux-riscv64
2ee1dee5c952a081896ac5b30853b6e59bd77b5fdd244bff2ea16a3172e8fb5a ./ytt-linux-arm64
6a1549260d7641585c4434c83ad237a66ec4fd4478edbd32e5e190ce1e755d20 ./ytt-linux-amd64
7a7530de7e7e54cf2326ff491b337bf4c673f2d8a404159e033a45a6d6067b8c ./ytt-windows-amd64.exe
b447fa763dac6cad0e2497cb382a778cc4d47171374cc1347ca2896f2e1c1ea6 ./ytt-darwin-arm64
c4dad8e654e9890a745aa62f3cbf87e5a6ccd5302afdf64855e918e5cdea81ca ./ytt-darwin-amd64
v0.53.2
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
Full Changelog: v0.53.1...v0.53.2
📂 Files Checksum
0e9e75b7a5f59161d2413e9d6163a1a13218f270daa1c525656195d1fcef28f6 ./ytt-linux-arm64
18fe794d01c2539db39acb90994db0d8e51faa7892d0e749d74c29818017247a ./ytt-linux-amd64
4cc85a5e954d651d547cdef1e673742d995a38b0840273a5897e5318185b4e18 ./ytt-darwin-arm64
641f84d65af7459ccaaa83694666bc9e5deb92b2b2dd94c34f51ddd94f0c69d2 ./ytt-windows-amd64.exe
7c825bfb2e11565904d23bd9b850fb73de3a73bf5019986d9f08807875a86c6b ./ytt-windows-arm64.exe
b1d90bf73071c78edb62a0f37663c655c99a3203783593e6e7988c2eeee5f935 ./ytt-linux-riscv64
cc51c3040b91bb0871967f9960cd9286bafd334ffd153a86914b883f3adad9ef ./ytt-darwin-amd64
v0.53.1
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Bump golang to 1.25.7 to fix CVEs in #976 from @CodesbyUnnati
Full Changelog: v0.53.0...v0.53.1
📂 Files Checksum
2eaafe06d5e22203da2b74819685f9fd06ddc0a5cd38afc458821824990c78c0 ./ytt-darwin-arm64
36adcaa1f02681b0e7ceb73bda70ab11e3880588b51a188fd0318f6009bdeb36 ./ytt-windows-amd64.exe
5e479410a478385f6209624765e21c9880c07c6528ce6ed5e3dcca1e8b4a5677 ./ytt-linux-arm64
6b250c85d94b6b0643a58129ebf37244edb519fb9bc4aded1a8508d542d94ed3 ./ytt-linux-riscv64
764dadb577e680fa8fd09a28d281c570cb0e75accebb2ab0a328ab24b4032cfe ./ytt-darwin-amd64
cf675039fa1bde77ebd12ed79eeaa698f7d9862a2b5fd82078260974ec311649 ./ytt-windows-arm64.exe
ecdc1439e52139335e42a23d1aa8941f575c52e70e58da709d2bad5038ecadae ./ytt-linux-amd64
v0.53.0
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.0/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.0/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Bump golang version to 1.25.6 to fix CVEs in #973 by @CodesbyUnnati
- Optimize OrderedMap string key comparison in #959 by @emh-jump
New Contributors
- @CodesbyUnnati made their first contribution in #973
Full Changelog: v0.52.2...v0.53.0
📂 Files Checksum
2e4986f44f3908a0a220b645587eab4d0ec70ff4a6818ca26d3a44e29e25f13c ./ytt-linux-amd64
37fb4c7528e025582bc74a0692dded61f85e9192ddf4263fdebdeb8c7cd82660 ./ytt-darwin-amd64
403dcbd6fef85bf40a086348f25c0ae3a817ad761755df4fe8cf5276dad18995 ./ytt-darwin-arm64
5316ea78cdd03a65d4c508b8af57670b461057c4f0050de12661af7125ba2e16 ./ytt-windows-amd64.exe
581863d3b27474bfcbb6101bfe070dfc9a1e3d914b197a7195a6bbdc92a21fc4 ./ytt-windows-arm64.exe
9260208e471595fb32fc70bd7e2e0f5915ebe6b0663c0f944a627adb34806cf5 ./ytt-linux-riscv64
f4922e95801bc2b9b4baf553d4650b9300670e2821e20690026f1bfd78cf8cd5 ./ytt-linux-arm64
v0.52.2
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.2/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.2/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.2/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Bump golang to 1.24.11 in #970
Full Changelog: v0.52.1...v0.52.2
📂 Files Checksum
02e1db4bce02f72a48312efca36fd1feb0d356ce21029e42916a88b17577b877 ./ytt-darwin-arm64
295cc5eb40091ad66c1093b955b73f290b5336a0b702e6318ba67a691b4031cb ./ytt-linux-riscv64
3abce3c1233e328e1cc11161b85d5c162fae04425ac1bbf4d29e6ba54781ff91 ./ytt-linux-arm64
5242b9078abd483da46f13f715254f415b6328b2d979af24a4074b56007a43ba ./ytt-windows-arm64.exe
76d5355a5135c59a1791f420f3094579f775cbf2a987328f920a05e1338f1e1f ./ytt-linux-amd64
8d7904ef61cd26e5bd94cd0e0cfc5cd4e7d5501845290034bfe87fee05cecb03 ./ytt-windows-amd64.exe
cde68e057a9a0a175eb7366bc8ab5f358f7ffb7ed736cfac8b37ef98444da918 ./ytt-darwin-amd64
v0.52.1
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.1/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.1/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.1/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Bump golang to 1.24.6 to fix CVEs by @devanshuVmware in #964
Full Changelog: v0.52.0...v0.52.1
📂 Files Checksum
1975e52b3b97bd9be72f4efb714562da6a80cf181f036ae1f86eec215e208498 ./ytt-darwin-amd64
490f138ae5b6864071d3c20a5a231e378cee7487cd4aeffc79dbf66718e65408 ./ytt-linux-amd64
7d86bd3299e43d1455201fc213d698bae7482cd88f3e05de2f935e6eab842db9 ./ytt-linux-arm64
a205f49267a44cd495e4c8b245754d8a216931a28ef29c78ae161c370a9b6117 ./ytt-darwin-arm64
a887653ace89a6c102646d685b01c6cb637aa2b1e0987b1be5a799ebefc893fa ./ytt-windows-arm64.exe
b437deb4eb8c9ada3e1405272450cdf33a0450684609af7df2eaccf36f1c1c92 ./ytt-windows-amd64.exe
fb53d2c409448c948f845a7b0df7748a0b8ecae31d3246fb48fd99988acf3e0b ./ytt-linux-riscv64
v0.52.0
Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.0/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.52.0/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Add riscv64 binary release #944 by @mengzhuo
- Improve performance #954 by @emh-jump
- Fix linting issues and bump go by @devanshuVmware and @joaopapereira
Full Changelog: v0.51.2...v0.52.0
📂 Files Checksum
063cf006ddcb6592500c8bedb20850ffd332e058fd34c1abff781bb6ef68c590 ./ytt-windows-arm64.exe
4c222403a9a2d54d8bb0e0ca46f699ee4040a2bddd5ab3b6354efd2c85d3209f ./ytt-linux-amd64
781f8950da84b2d2928b139eb38567584d9ddebc7e5a34fd97209ad61ae9cc65 ./ytt-linux-arm64
924eb899bdbb4b3652d941c7662acc434a7a35c07537e7cf48a7645b960a7ab5 ./ytt-darwin-amd64
a01005ec823b8cb048f6ac2962233ec340cf9040e254fee5c28d0e784da4ca49 ./ytt-windows-amd64.exe
d1d51f490b23891c03957c80ec8b63f97fb393f18a9f7bf024db75ef6960d743 ./ytt-linux-riscv64
f77bcbcd71802fcb55cb0333ed7e640e6cc6e9164b757af01a6ac69f6b503b47 ./ytt-darwin-arm64