v0.39.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.39.0/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.39.0/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.39.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.39.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

• Remove tools cache in github runner by @praveenrewar in #423
• sign release artifacts using cosign by @prashantrewar in #450
• Bump go version to 1.21.6 by @sethiyash in #452
• use carvel.dev to import imgpkg and vendir and bumped there versions by @sethiyash in #454

New Contributors

• @prashantrewar made their first contribution in #450

Full Changelog: v0.38.0...v0.39.0

📂 Files Checksum

5088c312db268540dcb312b8530c53758e683a01f1bb3600365085ddc41a9710  ./kbld-darwin-arm64
72cebba8bf6ffaba2d81899718b138d1f2f96bc26a6871dd020437cac08d2809  ./kbld-windows-arm64.exe
8c09cad1e8bab60d79a94db6b6f573acaf789e1f014b33213e7f24f031e39d87  ./kbld-windows-amd64.exe
9da907c879102d7dc4205e073d6d32abf4ef1c719851e96498aae42ed691c342  ./kbld-linux-arm64
9f4b12722c79a1bc748ea882e47ff939272a45c477fed8ac7e206001aca0bfb1  ./kbld-darwin-amd64
cdbfdfc1e5da490eb59705bfbc30b3fd05c0485474aff15bec52352af46d5880  ./kbld-linux-amd64

v0.38.4

✨ What's new

• Fix CVE by @rohitagg2020 in #512

Full Changelog: v0.38.3...v0.38.4

📂 Files Checksum

19bb8f674cc8747278a20abce251f940596d556a9d823070c41f0364d78feeb5  ./kbld-linux-arm64
1b8c3e250a5410d0dcdccd7fc35ed93267a8d3e5f283583212ad4d052023b69e  ./kbld-linux-amd64
331f453501ed8396524e57936bc668080731fcf86eee88463a7cd615e9116c26  ./kbld-windows-arm64.exe
51515a004ffdcab88965a56c3b0efeac21704904da380d64d61336dcd0d46fa6  ./kbld-windows-amd64.exe
6b2162171f640af7b81fd66d033d5516844bf6d9d3d4e479c5ca3542496caeb9  ./kbld-darwin-arm64
ba41adfeb71cf33cf32760f12e2fe8850b8a045a5b1995ca015c5b9c729afd8d  ./kbld-darwin-amd64

v0.38.3

What's Changed

• Bump go version to 1.21.9 in v0.38.x line by @sethiyash in #476
• Bumped imgpkg to v0.38.4 and vendir v0.35.4 in 38.x line by @sethiyash in #480

Full Changelog: v0.38.2...v0.38.3

📂 Files Checksum

09bd9f00c6ba8f3e47e4f775a7fc6634b18fe9d6323d6f25ad9ca97fd041f94e  ./kbld-darwin-amd64
30b5e56d1eea19987180c05e3aded43a1dcbaf9c42914adc0f299d280a922196  ./kbld-darwin-arm64
58fc9ff07421e6f93966271fe4fc5a9b84b592feb4cf1cffbdabe0c59e908f22  ./kbld-linux-arm64
85b0634e1ec9e9101061b5f2484b946048c0caaac16c5eb4de3b19eb295d11ec  ./kbld-windows-amd64.exe
b3135296360608c853177bb7af014c69d22d89edbce225b7360bfc792bf9723b  ./kbld-linux-amd64
c44d46e72862d593b3bf81d7ddc69857d77353d5a794febfb8bb51f847ddfb01  ./kbld-windows-arm64.exe

v0.38.2

What's Changed

• Bump go1.21.5 by @kumaritanushree in #444
• Bump imgpkg 0.38.3 and vendir 0.35.3 by @kumaritanushree in #447

Full Changelog: v0.38.0...v0.38.2

📂 Files Checksum

1f3e3871efb350c3d3f6b9de185c346b4a77a41033cd79f09b9fd15bc54d2418  ./kbld-windows-arm64.exe
36bb1e689247aca092c9cff7b349adb505760c257ccf1fcdf25a54086182c37c  ./kbld-linux-arm64
517fc342e17560059a10155ac740b43e2781abd6b2c22714407601f8ad656f4d  ./kbld-darwin-arm64
6f84a70fffb97886b75f8a57615d6f4a031361704ee9a66cc36477a529c233e1  ./kbld-darwin-amd64
bd471a1270481f04a3ad656b5911167cd4173ff7c1cc524ddc27569b02978a74  ./kbld-linux-amd64
d5c73c6f4e832e0674e2d2a4273a18cecdd8d7ff779d7da47eceaf966ee50b11  ./kbld-windows-amd64.exe

v0.38.1

What's Changed

• Bump golang.org/x/net from 0.14.0 to 0.17.0 by @dependabot in #418
• Remove tools cache in github runner by @praveenrewar in #423
• Bump go version to 1.21.3 by @sethiyash in #432

Full Changelog: v0.38.0...v0.38.1

📂 Files Checksum

00e114286588307d0785c4bfb1bb8f68acca1ea186eb79cd8475214214413291  ./kbld-linux-amd64
3b6356fe34f26ba3e0b76b3b49ed6c7cb700c4ae103d0051f977ebd45a6234ef  ./kbld-windows-arm64.exe
80b2402bd0fc6734c705db37341e639a3f39179bdda2835345dd2bee80dbc0e5  ./kbld-windows-amd64.exe
87a048146d0f183334d21747f14dd47feb79c0e432e2bffae01fe46220fc4495  ./kbld-darwin-arm64
dba78f59d887cc7433595a1e7754fcbc3a7a53f5fbbb23b2798d95114795ce78  ./kbld-linux-arm64
f3f735fc6d8666eed8aacb41917f4e2c77b9c4149c94e7e19d90a948d1ec2948  ./kbld-darwin-amd64

v0.38.0

✨ What's new

• Bumping go version to 1.21.1 by @sethiyash in #412
• Bumping imgpkg to v0.38.0 and vendir to v0.35.0 by @sethiyash in #414

📂 Files Checksum

0804fb9e7c60c1eb7f7550df5b1b2262ab3bf934d5f4944306b47ebad230b6ad  ./kbld-windows-arm64.exe
3d164cff500245e5c04057b3604288c9af6cab2e655e55b124a16088ef59e8bd  ./kbld-darwin-arm64
472afeeb890589d2ea625e123bbf1cd142744523f29ebbc64c2dcb8bad2ca666  ./kbld-darwin-amd64
6ec33b306b804a7477d19292993dd4947d0a4dcd136e72a9fc90087ee70fe9bf  ./kbld-windows-amd64.exe
9d6d2897b83a60dd9538c8f589e177ba0594747bb3717127dc4671a876a8a363  ./kbld-linux-arm64
c6ecf2d36b7a72f2bab57fae2a6e8a2a886c2b0072388a9f7dd07363fc0f13fc  ./kbld-linux-amd64

v0.37.6

🔴 Please disregard this version because it bumps go to 1.21, which might cause problems if you are importing kbld has a library.

---

✨ What's new

• add cii badge to readme.md by @microwavables in #406
• Bump k8s.io/apimachinery from 0.27.3 to 0.28.1 by @dependabot in #409
• Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 by @dependabot in #400
• Bump github.com/vmware-tanzu/carvel-imgpkg from 0.37.2 to 0.37.3 by @dependabot in #405
• Bump github.com/vmware-tanzu/carvel-vendir from 0.34.3 to 0.34.4 by @dependabot in #408
• Bump golang.org/x/sync from 0.2.0 to 0.3.0 by @dependabot in #388
• Bumping go version to 1.21.1 by @sethiyash in #412

Full Changelog: v0.37.5...v0.37.6

📂 Files Checksum

1e07f2f646c752cc67f7e4d41f098497e2e49f2798deb95fb5b56ca9598ab7ae  ./kbld-linux-amd64
2cef810d9c007515fe7ffb5932844eb9b8101c17798bb7f291fb3528b872316e  ./kbld-windows-arm64.exe
31292539125e5735159e5d1c447876a73832a12b10442282697299cc2f2ade55  ./kbld-linux-arm64
4e63fbb638327aa00aa30ae54bc441d2e52ded0f299c67688d005d86d9c9d7a6  ./kbld-darwin-arm64
5ae0175372b36c40ffc40db32a6e0ef0d30a260b6b717ef5836a9f9a34bf7f72  ./kbld-darwin-amd64
ff8a53182dc2a84b931c9d32d79ee73493930f30b2811be9ad25c8d11a5ede22  ./kbld-windows-amd64.exe

v0.37.13

What's Changed

• Bump go version to 1.22.3 in v0.37.x line by @rohitagg2020 in #485

Full Changelog: v0.37.12...v0.37.13

📂 Files Checksum

009f923a9961004e828a679a228fe0da82f79f076496c18cac48c05de9d6b1a0  ./kbld-darwin-amd64
014021d7771d9ec36fc499df335728be13d6c91dc1f99ea236cedd8d66fcc8bf  ./kbld-windows-amd64.exe
7783ee7d4eaae9a683e9926af4d01e1ee0602240419b14e5d7806a57d5bfe19e  ./kbld-linux-amd64
aff96eb36fe67b339f1886ad5225bb25e1da990bc2a1f0e3f0bd4a86dbcb205f  ./kbld-darwin-arm64
ce9770ac980e95750de65210d6f56cfc84a82b12af3c383ddbcd232bb45b5fbf  ./kbld-linux-arm64
de4c37ba7a7b7bcdcb7f2906f71fcf603f8e046252ba91ffd868f9987c581b78  ./kbld-windows-arm64.exe

v0.37.12

What's Changed

• Bump go version to 1.22.2 in v0.37.x line by @sethiyash in #477
• Bump imgpkg to v0.37.10 and vendir to v0.34.11 in 37.x line by @sethiyash in #481

Full Changelog: v0.37.11...v0.37.12

📂 Files Checksum

2bebea1251bb11f3c7c468234fbda5c959a03c79834b1901d06a800a0b313d0e  ./kbld-linux-arm64
43ccbd40ce295fa54cf8a562aa408dc52479e03cd9e2901665e7b769f788c244  ./kbld-darwin-arm64
70403fb1fdda2b8c3fff763b8cdc951077457fbbfe88450503d1b1f83cca4461  ./kbld-windows-amd64.exe
9fa4d5bd86a2e181067fd463e6a092fe0231648edf54eda4a1847d54faa3e95a  ./kbld-darwin-amd64
a5538deeca1fef18fa3041ec84bbe78e39465309487b8c04f04938fd24de57b8  ./kbld-windows-arm64.exe
eea10c6c365fbf8fb94fb72859930722fcfe1962e985f4bd921166aa0f76e9c1  ./kbld-linux-amd64

v0.37.11

What's Changed

• Bump go1.20.12 by @kumaritanushree in #443
• Bump imgpkg 0.37.9 and vendir 0.34.10 by @kumaritanushree in #446

Full Changelog: v0.37.10...v0.37.11

📂 Files Checksum

01a3c2b4b92835f736d06fe9aa4f88149ae0c453f1183618497970cc07356ddd  ./kbld-windows-amd64.exe
7aeff804bec32c4c81e45293068a196dab45224a3e2857d2d5ab568ed2791778  ./kbld-linux-amd64
88f3e36364b713c47797e12046949c0039c2c79a342422bb440b1d3001d8a1c1  ./kbld-linux-arm64
8d2cbff8094f13dad85ec6964ac67be1c1ad9882cfe8b60faca2b7c83e17ec2d  ./kbld-windows-arm64.exe
d89df4fd121ce75ed954533ca2030eeb9390c83c519d4d6c492056ca543d41c7  ./kbld-darwin-arm64
ff91efbcc48198ee1e5f7d47ae17a41cb8a0aedba57aba3eb17eb1d1439d9d66  ./kbld-darwin-amd64