chore(deps): update k8s related bumps

[renovate]

This PR contains the following updates:

Package	Update	Change
k14s/kapp	minor	0.62.1 -> 0.63.3
k14s/ytt	minor	0.49.1 -> 0.50.0
kudobuilder/kuttl	minor	0.17.0 -> 0.19.0
mikefarah/yq	patch	4.44.2 -> 4.44.3

To easily extract checksums: yq_version=;curl -sSL https://github.com/mikefarah/yq/releases/download/v${jq_version}/checksums |grep "yq_linux_amd64 "|cut -d' ' -f37

---

Release Notes

k14s/kapp (k14s/kapp)

v0.63.3

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/kapp-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

##### Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.3/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

• Fixing CVE by @​rohitagg2020 in #​1010

Full Changelog: carvel-dev/kapp@v0.63.2...v0.63.3

📂 Files Checksum

0007ec49c089f332b8c3a5dcdf5c0587e63afe1609857e28ea961cea8533e6e7  ./kapp-darwin-arm64
04accaa9a8d8a8fda12a47a3f22d5f16a1738b3088c1467af03c082aee7979f5  ./kapp-windows-amd64.exe
33702a40b6032ada742d73c59afeb393d0830a1913e3a599ca995eba3e68a57e  ./kapp-linux-amd64
46b9961d8998c4a797ea3d648b83cf18be616945b48119d0b1e7a66813dc3658  ./kapp-darwin-amd64
dbdfa194067c420b5e5ed36cb99f008c9a2dec05f5aeebe770b854898d3de2c4  ./kapp-linux-arm64

v0.63.2

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/kapp-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

##### Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

• Bump go version to 1.22.5 by @​devanshuVmware in #​985

New Contributors

• @​devanshuVmware made their first contributihttps://github.com/carvel-dev/kapp/pull/977ll/977

Full Changelog: carvel-dev/kapp@v0.63.1...v0.63.2

📂 Files Checksum

65084088d51fa0a43a31c71da175e8158844f776e2d2731f89cc51787823ed2d  ./kapp-darwin-amd64
7b747f0107481b3b9faf8d2cac29126fb1a2aeb028cf33a551c67d8e7a6f075f  ./kapp-darwin-arm64
d760b51d8e9e3f5d0847e84fad05a51d1415fcfe309e10f885edd51d3e8c1301  ./kapp-linux-amd64
e68f3c87cd7ad0af361bef633f621e677ac53d17c946f4d40d7c12a31156bd51  ./kapp-windows-amd64.exe
f499fa48f42509e8e4e492c5f68126205319529e34b98249adbfb082a31b37db  ./kapp-linux-arm64

v0.63.1

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/kapp-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

##### Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.1/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

• Add change validation for maximum constraints to CRD Upgrade safety preflight check by @​rashmigottipati in #​951
• Add configuration to permissions pre-flight check to use SelfSubjectAccessReview or SelfSubjectRulesReview by @​everettraven in #​931
• Add handling of updates to default values to the CRD Upgrade Safety preflight check by @​rashmigottipati in #​950
• Add handling of updates to required fields to the CRD Upgrade Safety preflight check by @​rashmigottipati in #​933
• Allow custom wait rules for kapp-controller resources by @​praveenrewar in #​932
• Do not remove usedGKs when all resources are deleted by @​praveenrewar in #​928
• Make fields of Resource Filter Flags accessible outside the package by @​rohitagg2020 in #​941
• Update cron-job apiversion by @​jmcudd in #​947
• Add validation for changes to minimum constraints for CRD fields by @​everettraven in #​944

New Contributors

• @​jmcudd made their first contributihttps://github.com/carvel-dev/kapp/pull/947ll/947

Full Changelog: carvel-dev/kapp@v0.62.0...v0.63.1

📂 Files Checksum

2bdd36a64c1d40ac9666cf8fe64e89bd2064d31989f837a6c15ef4198a896799  ./kapp-darwin-arm64
3eed107de438378b35e619b37791512984e870e7e647fea312226a0e6fc9cd43  ./kapp-linux-amd64
8ad9d09844fd0710537190e1743b8fbcbe02b05f8180151e3420908120731071  ./kapp-darwin-amd64
aa8874eb186344601e4ff695de6406b06324039061c301cffd4a039618c021b9  ./kapp-windows-amd64.exe
fecd32c9760da68791e591afffd53ce0a935471bf40d1e3fd941e602d7becb04  ./kapp-linux-arm64

k14s/ytt (k14s/ytt)

v0.50.0

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

##### Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/ytt-linux-amd64

##### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

##### Make the binary executable
chmod +x /usr/local/bin/ytt

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.50.0/checksums.txt.sig

##### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Bump golang to 1.22.5 by @​devanshuVmware in #​923
• Print full path rather than RelativePath only by @​ernstvonoelsen in #​903

New Contributors

• @​devanshuVmware made their first contributihttps://github.com/carvel-dev/ytt/pull/923ll/923

Full Changelog: carvel-dev/ytt@v0.49.0...v0.50.0

📂 Files Checksum

01bbd9490c48309909ef7e314fcaf284667017c31321dc4edc30e2edf0dfa1c1  ./ytt-windows-arm64.exe
4067a41d44d977b5bd492c227ae9cc62d803df788ec9f4d612f89090eb01e946  ./ytt-windows-amd64.exe
61dec6e00131f990db853afc4b7531c318bd3af3ba18f2cfdbc0d5e83a45c445  ./ytt-linux-amd64
d79f0b4189403c4142f5c646989de0769a316896a6096dfd1719605d313e8d1e  ./ytt-darwin-amd64
f38290c2666ddcf6feb4907f91033c4f41022b3fb84893c42d1f48948597b82a  ./ytt-linux-arm64
f3ce72031d34f0a3d909b1c971017bb3788bb786d3bb5cba1bf6d699255be643  ./ytt-darwin-arm64

kudobuilder/kuttl (kudobuilder/kuttl)

v0.19.0: kuttl-v0.19.0

Compare Source

Changes

🚀 Highlights

• feat: add user impersonation to all commands (#​549)

🐛 Bug Fixes

• Make it possible to build with Go 1.23. (#​548)

🌱 Dependency bumps

• Bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 (#​555)
• Bump sigs.k8s.io/controller-tools from 0.16.1 to 0.16.2 in the kubernetes group (#​554)
• Bump github.com/docker/docker from 27.1.2+incompatible to 27.2.0+incompatible (#​556)
• Bump github.com/docker/docker from 27.1.1+incompatible to 27.1.2+incompatible (#​551)
• Bump the kubernetes group with 8 updates (#​550)
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible (#​545)
• Bump the kubernetes group with 5 updates (#​544)

Contributors

@​dependabot, @​dependabot[bot], @​logan-bobo and @​porridge

v0.18.0: kuttl-v0.18.0

Compare Source

🚀 Highlights

• feat: add lazy loading kubeconfigs for Test Steps (#​540)

🌱 Dependency bumps

• Bump github.com/docker/docker from 24.0.9+incompatible to 27.0.3+incompatible (#​534 #​538 #​543)
• Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#​537)
• Bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.1 (#​536)
• Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#​535)
• Bump the kubernetes group with 7 updates (#​533)
• Bump k8s dependencies and group them. (#​529)
• Bump github.com/stretchr/testify from 1.8.2 to 1.9.0 (#​528)

Other Changes

• chore: fix bug label not being auto-added (#​542)
• A couple more release doc updates. (#​523)
• Create dependabot.yml (#​522)

Contributors

@​dependabot, @​dependabot[bot], @​kumar-mallikarjuna and @​porridge

mikefarah/yq (mikefarah/yq)

v4.44.3

Compare Source

• Fixed upper-case file extension detection, Thanks @​ryenus (#​2121)
  • Log printing follow no-colors flag #​2082
  • Skip and warn when interpolating strings and theres a unclosed bracket #​2083
  • Fixed CSV content starting with # issue #​2076
  • Bumped dependencies

---

Configuration

📅 Schedule: Branch creation - "after 1pm on Monday,before 4pm on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.