v0.48.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.48.0/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.48.0/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.48.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.48.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• b48fe70 build(deps): Bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login
• f63f6d1 build(deps): Bump github.com/docker/cli
• 7b0464b build(deps): Bump golang.org/x/sys from 0.42.0 to 0.44.0
• 2566095 build(deps): update CLI framework and test-generation tooling

Full Changelog: v0.47.2...v0.48.0

📂 Files Checksum

11104d72e3bf1e20e932379606ffa3cdfd2bed48daacf7f118d5e0f9010609c7  ./imgpkg-darwin-amd64
a29b22c1992ede7d3274520c2efd4672c697ca5f5857d7c2a7af74cfb9c8c243  ./imgpkg-darwin-arm64
63719b10884f95b83b7dc0831257869dadfe02ea7c68b7c9fdcb35ba687d5cf5  ./imgpkg-linux-arm64
c35814ecab145c28700e9cc86826ed08942f17162cb1fb796e075058b022488c  ./imgpkg-linux-amd64
8402a4c6edacaa77f543b32f2134c8acaf2641f63e2cb7e2e95f939122dba8ad  ./imgpkg-windows-amd64.exe

v0.47.3

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.3/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.3/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.3/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Bump go by @praveenrewar in #782

Full Changelog: v0.47.2...v0.47.3

📂 Files Checksum

10bff19e58edbbb082f368082dae350f9862c5a79e218bdcc960ade4722a047c  ./imgpkg-linux-amd64
7a6d10d4156bcf356cd2211d16691493625861a599a69e0ae116f0c4873f773a  ./imgpkg-windows-amd64.exe
8209b6f91c6c80d24ede0c5a7b0911fc9b383d22e4809738f3fcd862e08cbf32  ./imgpkg-linux-arm64
b18776b011bc8b6e81eb2e03d4fd373daa164154885d1b3a03c6abf1b1bb84fe  ./imgpkg-darwin-amd64
e78fa326f7932f8e8a1fa7da5dec0762b8838f0fb8df96d7651c2f81ddf57a8d  ./imgpkg-darwin-arm64

v0.47.2

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Bump golang to 1.25.7 in #771 by @CodesbyUnnati

Full Changelog: v0.47.1...v0.47.2

📂 Files Checksum

340fbd0b3a62d1db9150bab05b6718265e44f40b3fe813fd6b514cf5b8b8a0a2  ./imgpkg-darwin-amd64
39e0f1ebdb9c66ee3beac38216e6fe472c7061e5851b103155bcddb51e123065  ./imgpkg-darwin-arm64
bcc4766eb2e457d8b1d28e74c2b0a2c2f7e958f43c65ab492dc72fcd5b1d4147  ./imgpkg-linux-arm64
c8f0da1ee06a806a0480f874366d4dac1b35fffd64da6ff55e26ea01144e2f9c  ./imgpkg-linux-amd64
f39602a17c3408a70dc1282907d7ce3aaacb42c850f15d5407f3881bd269e462  ./imgpkg-windows-amd64.exe

v0.47.1

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.1/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.1/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.1/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Bump golang.org/x/crypto from 0.35.0 to 0.45.0 by @dependabot[bot] in #764
• Bump golang to 1.25.6 by @CodesbyUnnati in #768

New Contributors

• @CodesbyUnnati made their first contribution in #768

Full Changelog: v0.47.0...v0.47.1

📂 Files Checksum

28b63732a6ee7bce9a9e3c98de8b53adaa51f83333fbb79ed5de2fc96fcb05ad  ./imgpkg-darwin-arm64
6ad336f352e23ed68b9da7d2843e6784a9c913f7950edb56aec74c98e251e364  ./imgpkg-linux-amd64
c239b503edba511d7e12a839c4440f88b39633f120a4688b4e83aa191f7bbeb6  ./imgpkg-windows-amd64.exe
cc4aa100f9f0b0e86c0d206f253eb112b8014736ce9764dd3a997c08b16a661d  ./imgpkg-darwin-amd64
ec80cb342d78d8b068f3fcda9e1c6b3f25c7efec860d5c8d413b8cb9d55bdc2e  ./imgpkg-linux-arm64

v0.47.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.0/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.0/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Allow shallow-copy of a bundle by @rosenhouse in #758
• Add layer and image size information to describe command by @mdzhigarov in #760
• Bump golang.org/x/sys from 0.32.0 to 0.33.0 by @dependabot in #740
• Bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot in #741
• Bump golang to 1.24.9 by @devanshuVmware in #759

New Contributors

• @rosenhouse made their first contribution in #758

Full Changelog: v0.46.0...v0.47.0

📂 Files Checksum

14d0083027eeba54a4804c561fb41d0c723f908ec91e073e88f3a64c52b54544  ./imgpkg-linux-arm64
465b4843ae762c6a693fffe250a13bef37536cf6fd218d791165a919214447c5  ./imgpkg-darwin-arm64
5e03036ecc48c3385618f6020bad13554493019dbb472062f6ccab28e4b01162  ./imgpkg-darwin-amd64
754abc5ed6d3dcab5791107ed355e10ba30041ba8ede1f5d94b9a733c71eae48  ./imgpkg-windows-amd64.exe
7602b6af24a818265dcb2cc0dc7f6117a3591f26e2c266f294800f99ae433da1  ./imgpkg-linux-amd64

v0.46.1

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.1/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.1/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.1/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Bump go version to 1.23.8 by @devanshuVmware in #739

Full Changelog: v0.46.0...v0.46.1

📂 Files Checksum

14dfc45cc3927a64c99d5a0b473fc74539ca7027f2f0acfef9a8edc5fff50f44  ./imgpkg-windows-amd64.exe
1bc6b735dbdd940a5c78661781f937090bd5fbc89172f01e600ee91fe122edbe  ./imgpkg-linux-amd64
3e7cfba3cc55401ad1bbc80c7710e67a0376c56d8a72dc81864ffbbe64b30aba  ./imgpkg-linux-arm64
7d72601f46827ba7cb65ba2f0cc07fb1ccfdcc99d7b6cdb5923ecedb692f7c31  ./imgpkg-darwin-amd64
db44c36ee72481afe70105cda10989e441ad23f6292b9ff1de815c9e1e3a3416  ./imgpkg-darwin-arm64

v0.46.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.0/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.0/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.46.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Make resume option faster by reusing the tar file instead of copying it to the side

Full Changelog: v0.45.0...v0.46.0

📂 Files Checksum

0a2fc4faef18c342d310357a948766818fda2c0753d42b26e23a58afa9cbf761  ./imgpkg-darwin-amd64
2f7543d3873e60776a8dfb5e4f329c7d2f476413247bb11f6e816a649be1d7a1  ./imgpkg-darwin-arm64
8b8801eecbcea1206e2e3d6c391288b092108eab93f8ff0d9bacd5059af697df  ./imgpkg-windows-amd64.exe
a57004ab4a52c3e9b3b1c2eeab76113b3cbffaa46142f56261bbf2d2fedc182a  ./imgpkg-linux-arm64
e21cb5f3ff185b6a5e93ce6114cd7120e8bafe658916a1b549d7c54fce806ced  ./imgpkg-linux-amd64

v0.45.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.45.0/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.45.0/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.45.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.45.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• In the past we were supposed to change the behavior of the flag --layers from the describe command, but we only changed the text and not the default value.
• Maintenance update of libraries
• Fix the --resume flag behavior to effectively resume. There was an issue with the implementation that was causing resume not to do what it was supposed to do

Full Changelog: v0.44.2...v0.45.0

📂 Files Checksum

1238477e9067cf68143ef6bce3279e983c72eb0eb0a7513b5ca1f23a2f4aa6c1  ./imgpkg-darwin-amd64
51dbff787fd64d25869737e92516b4d2e31d4ae2b2f0773dae032217e3e1bf58  ./imgpkg-linux-arm64
9ad0814e1e8742ee40c6affa5324f6b62d565a1c19cbc782446bff9eb15ced7a  ./imgpkg-windows-amd64.exe
c06708b47baf4e647ec7d88def7eca21c4d7732b369e832131b1649ab2a4a180  ./imgpkg-linux-amd64
e351f9c590008eea4719c22ce19ee505d97fc32f43373d1a3ed518267d6a0ccc  ./imgpkg-darwin-arm64

v0.44.2

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.2/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.2/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Maintenance update of libraries and go version

Full Changelog: v0.44.0...v0.44.2

📂 Files Checksum

133cc95fe9baa7a3fa41cdaab6e5ef60a1f54c76731be5f1b0cac577c360cc8d  ./imgpkg-darwin-amd64
4aff1dea4d9f2e84ba321e2ff9a0194660508fe9267c44d9cd57e89d5eb3d8ee  ./imgpkg-linux-arm64
51e2b75f809b10191afd7566bdcb7390fa6aec2d34287685ef53ec29f6569657  ./imgpkg-darwin-arm64
904bcc6ab88257be95970ca33cf03a49a07e717872deda4292ff963d0cc338ce  ./imgpkg-linux-amd64
c0709f09be57989c2ddbccfa77b7183eb4e9f4b97b2ed5a596b6a533baca5e17  ./imgpkg-windows-amd64.exe

v0.44.0

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.0/imgpkg-linux-amd64

# Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg

# Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.0/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.44.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Move tag mechanism out of internal in #701 by @joaopapereira
• Bump go to version 1.23 in #703 by @joaopapereira

Full Changelog: v0.43.0...v0.44.0

📂 Files Checksum

036870d2489abec4b7d4fd4fdde7bc88d3945d55743d0a9282f3a47dc78eac53  ./imgpkg-darwin-amd64
15ca4f8ec4c7a1c6ecf06740a942149887a73845565f0ffbf6ccbf013b65a58a  ./imgpkg-linux-amd64
8e113eb80ebb6c7fc508304b919fc6cc3e4151718beebd16260671ad6d5a199b  ./imgpkg-windows-amd64.exe
afa82893d76cd390be622a32d5e33f10f483437e963060e59e22c8f5da3090d2  ./imgpkg-darwin-arm64
f772b6eb10654f45d15d2166d5be81cf18529aece59df906c25dcb364f508ebe  ./imgpkg-linux-arm64