From aa18392e9fb692e0a22cbb52693a4fd8150119c5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 21 Jan 2024 22:42:00 +0000
Subject: [PATCH] chore(deps): update dependency carvel-dev/ytt to v0.47.0
 (#223)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [carvel-dev/ytt](https://togithub.com/carvel-dev/ytt) | minor |
`v0.46.3` -> `v0.47.0` |

---

### Release Notes

<details>
<summary>carvel-dev/ytt (carvel-dev/ytt)</summary>

###
[`v0.47.0`](https://togithub.com/carvel-dev/ytt/releases/tag/v0.47.0)

[Compare
Source](https://togithub.com/carvel-dev/ytt/compare/v0.46.3...v0.47.0)

<details>

<summary><h2>Installation and signature verification</h2></summary>

##### Installation
##### By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/ytt-linux-amd64

### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

### Make the binary executable
chmod +x /usr/local/bin/ytt
```

##### Via Homebrew (macOS or Linux)

```shell
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub
OIDC(Refer [this](https://docs.sigstore.dev/system_config/installation/)
page for cosign installation). To validate the signature of this file,
run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.47.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature.

```shell

### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```

</details>

#### What's Changed
* sign release artifacts using cosign by
@&#8203;prashantrew[https://github.com/carvel-dev/ytt/pull/887](https://togithub.com/carvel-dev/ytt/pull/887)ll/887
* Bump go version to 1.21.6 by
@&#8203;sethiya[https://github.com/carvel-dev/ytt/pull/888](https://togithub.com/carvel-dev/ytt/pull/888)ll/888

#### New Contributors
* @&#8203;prashantrewar made their first
contributi[https://github.com/carvel-dev/ytt/pull/887](https://togithub.com/carvel-dev/ytt/pull/887)ll/887

**Full Changelog**:
https://github.com/carvel-dev/ytt/compare/v0.46.0...v0.47.0

### :open_file_folder: Files Checksum

4c37056702d842570b0bce2f461f494902a2fbd8d83ef1ded224d0def1f04ccb
./ytt-windows-arm64.exe
67b7cb20273cb00d36bda38888277c1b0e74992a422c771d28e7a9c2045da798
./ytt-windows-amd64.exe
700dbb362a73950d779cf298ba191de2a35394fa68bf19e74add5e7384b2875a
./ytt-darwin-amd64
aec0bf2b5ca7dc98dd04444135738d0a1add18fcc1294c258eb8f1061b3eb9ec
./ytt-darwin-arm64
de2dd0a659fd12b2d80e00fa2a4a9316db67e0372e79c3bf48586ea53201180e
./ytt-linux-amd64
f12dc884af6be46a56c4233cbe456e90d8082d4699c0412d4adfaaae68712f4d
./ytt-linux-arm64

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log [here](https://developer.mend.io/github/mykso/myks).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMzUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEzNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: German Lashevich <german.lashevich@gmail.com>
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index a20cdd4b..41b5d010 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,7 +33,7 @@ FROM downloader AS ytt
 ARG TARGETOS
 ARG TARGETARCH
 # renovate: datasource=github-releases depName=carvel-dev/ytt
-ARG YTT_VERSION=v0.46.3
+ARG YTT_VERSION=v0.47.0
 RUN curl -fsSL \
       https://github.com/carvel-dev/ytt/releases/download/${YTT_VERSION}/ytt-${TARGETOS}-${TARGETARCH} \
     > ytt