Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump carvel.dev/vendir from 0.40.0 to 0.40.1 (#7709)
Bumps [carvel.dev/vendir](https://github.com/carvel-dev/vendir) from 0.40.0 to 0.40.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/carvel-dev/vendir/releases">carvel.dev/vendir's releases</a>.</em></p> <blockquote> <h2>v0.40.1</h2> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <h3>Installation</h3> <h4>By downloading binary from the release</h4> <p>For instance, if you are using Linux on an AMD64 architecture:</p> <pre lang="shell"><code># Download the binary curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/vendir-linux-amd64 <h1>Move the binary in to your PATH</h1> <p>mv vendir-linux-amd64 /usr/local/bin/vendir</p> <h1>Make the binary executable</h1> <p>chmod +x /usr/local/bin/vendir </code></pre></p> <h4>Via Homebrew (macOS or Linux)</h4> <pre lang="shell"><code>$ brew tap carvel-dev/carvel $ brew install vendir $ vendir version </code></pre> <h3>Verify checksums file signature</h3> <p>Install cosign on your system <a href="https://docs.sigstore.dev/system_config/installation/">https://docs.sigstore.dev/system_config/installation/</a></p> <p>The checksums file provided within the artifacts attached to this release is signed using <a href="https://docs.sigstore.dev/cosign/overview/">Cosign</a> with GitHub OIDC. To validate the signature of this file, run the following commands:</p> <pre lang="shell"><code># Download the checksums file, certificate and signature curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.pem curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.sig <h1>Verify the checksums file</h1> <p>cosign verify-blob checksums.txt <br /> --certificate checksums.txt.pem <br /> --signature checksums.txt.sig <br /> --certificate-identity-regexp=<a href="https://github.com/carvel-dev">https://github.com/carvel-dev</a> <br /> --certificate-oidc-issuer=<a href="https://token.actions.githubusercontent.com">https://token.actions.githubusercontent.com</a> </code></pre></p> <h3>Verify binary integrity</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/carvel-dev/vendir/commit/ced240e3296ba98a4f2caa046688fa3b417025f2"><code>ced240e</code></a> Merge pull request <a href="https://github.com/carvel-dev/vendir/issues/378">#378</a> from carvel-dev/bump-go-1.22.2</li> <li><a href="https://github.com/carvel-dev/vendir/commit/e734e90468c3e6dc3be98cc5e2ad5b2408aaf976"><code>e734e90</code></a> Bump go version 1.22.2</li> <li><a href="https://github.com/carvel-dev/vendir/commit/abf7f1c95cbb37e42db7df77475cc4f624af6060"><code>abf7f1c</code></a> Merge pull request <a href="https://github.com/carvel-dev/vendir/issues/373">#373</a> from mamachanko/topic/mamachanko/develop/bump-semver</li> <li><a href="https://github.com/carvel-dev/vendir/commit/408592d0190db7fcabee4a85f1deb788dc6220da"><code>408592d</code></a> Use latest github.com/carvel-dev/semver</li> <li><a href="https://github.com/carvel-dev/vendir/commit/0b185de0d4a7717bb1500e225cc157c987a6843c"><code>0b185de</code></a> Test against kubectl 1.23.x</li> <li><a href="https://github.com/carvel-dev/vendir/commit/58ff5831092e04ff488f5305699e8aeefd7104e8"><code>58ff583</code></a> Merge pull request <a href="https://github.com/carvel-dev/vendir/issues/370">#370</a> from grokspawn/docker-bump</li> <li><a href="https://github.com/carvel-dev/vendir/commit/ae68cff5b1fe3edfb2a6d6dd0cbf1cca643e78a3"><code>ae68cff</code></a> [chore] bump docker/docker, docker/cli to v25.0.5</li> <li><a href="https://github.com/carvel-dev/vendir/commit/9fa4c21f47d478a8f4b17c1d06414c2485ff6082"><code>9fa4c21</code></a> Merge pull request <a href="https://github.com/carvel-dev/vendir/issues/369">#369</a> from prashantrewar/update-copyright-header</li> <li><a href="https://github.com/carvel-dev/vendir/commit/4cf9128568ac615c2d2b3ef99ebc154a7548b1a2"><code>4cf9128</code></a> Update copyright headers</li> <li><a href="https://github.com/carvel-dev/vendir/commit/bd6adce665b6e3cc68bb6a39bc2aab46047d59dc"><code>bd6adce</code></a> Merge pull request <a href="https://github.com/carvel-dev/vendir/issues/368">#368</a> from carvel-dev/dependabot/go_modules/github.com/dock...</li> <li>Additional commits viewable in <a href="https://github.com/carvel-dev/vendir/compare/v0.40.0...v0.40.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information
1 parent
3930a5f
commit 909b896