Update K8s related bumps by renovate[bot] · Pull Request #202 · orange-cloudfoundry/paas-docker-cloudfoundry-tools

renovate · 2026-06-22T16:35:00Z

This PR contains the following updates:

Package	Update	Change
k14s/kapp	patch	`0.65.0` → `0.65.4`
k14s/ytt	patch	`0.55.1` → `0.55.2`
mikefarah/yq	patch	`4.53.3` → `4.53.6`

To easily extract checksums: yq_version=;curl -sSL https://github.com/mikefarah/yq/releases/download/v${jq_version}/checksums |grep "yq_linux_amd64 "|cut -d' ' -f37

Release Notes

k14s/kapp (k14s/kapp)

`v0.65.4`

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.4/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

Allow non-approved MD5 use under GODEBUG=fips140=only by @sameerforhttps://github.com/carvel-dev/kapp/pull/1133l/1133

Full Changelog: carvel-dev/kapp@v0.65.3...v0.65.4

📂 Files Checksum

bf7df0647d7645572d45185bb8bf6a40dd1e631ff4ee1522bc8ce56db53bd243  ./kapp-linux-amd64
e41693ac3d69e1143c7e5fe870712ca05ed810e1e0bc5b00f77ca22ba0f18ae1  ./kapp-linux-arm64
d2f6a45c09703f2aff01422cc130f00f702094757c17804ab18de4dda2249ada  ./kapp-darwin-amd64
a7ecd6a2ac62fdce02bb40784f2701e2421539e4bae6c3cd58dc8e943170c666  ./kapp-darwin-arm64
e9c0c3e48ba2b3c26380b6a997dcf1798b19147c3e9a11895a4e9c55c52470b0  ./kapp-windows-amd64.exe

`v0.65.3`

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.3/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Changelog

d6706e15 Bump go (#1127)

What's Changed

Bump go by @praveenrewhttps://github.com/carvel-dev/kapp/pull/1127l/1127

Full Changelog: carvel-dev/kapp@v0.65.2...v0.65.3

📂 Files Checksum

1724da4b62982285b1da696fb0354738e33913b33e59f3787b5c2b5ac7030327  ./kapp-linux-amd64
3092f5050d30460d857e836bb9454aa84aed83db6532947ec2395b61501f2124  ./kapp-windows-amd64.exe
485eb76508c33365780a91831ebbf030b1be93b02d6011935abdaa751328d719  ./kapp-linux-arm64
75c1c9809d3d3c618480be6ffaa00a4650e9792a86c8e561d63d8927828fc0e1  ./kapp-darwin-arm64
cebb31f6b72cd94dc4e1c17b31ba6e4ac70caeb53e4b29aea1fbc1885605e9a7  ./kapp-darwin-amd64

`v0.65.2`

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's New

deps: bump ytt and kapp-controller by @sameerforhttps://github.com/carvel-dev/kapp/pull/1126l/1126

Full Changelog: carvel-dev/kapp@v0.65.1...v0.65.2

📂 Files Checksum

38b0a6eb958210f5db2cf79ee4082adf7b6cf52de983b5364c56d03d898b6439  ./kapp-linux-amd64
0285fd258404b902d3a27d17f7a4ce7a01936edef7a1b822632d13b407afb39d  ./kapp-darwin-arm64
a877a004f8b703218883c3f7140bda216f53b9b9e5b29fecf5cec7d4ad6d85b0  ./kapp-linux-arm64
91bd0bcc041b9ce135d8f119dc8e404bce7f8f7aa1c3b10cb34ac25d88ca2d7f  ./kapp-darwin-amd64
20c42452744622c140dac28c9820405c115974899ea90817325c494855578195  ./kapp-windows-amd64.exe

`v0.65.1`

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.1/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.1/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

Bump Golang to 1.25.7 by @CodesbyUnnahttps://github.com/carvel-dev/kapp/pull/1109l/1109
Migrate ytt dependency by @Siegfriehttps://github.com/carvel-dev/kapp/pull/1109l/1109

Full Changelog: carvel-dev/kapp@v0.65.0...v0.65.1

📂 Files Checksum

057d7fe33dd6afeb452a888d37995f789b9de0778ce4908896e37d37c52e6ead  ./kapp-linux-amd64
05be91c13b02646ed31b053720cbe27b840b10c62fa7a565fbfe817ce45ed97f  ./kapp-darwin-arm64
1d92b138d8cf93ae627a3b9dbb1f31fc3d6d6298304f90fdbc122acf3b84c13a  ./kapp-linux-arm64
50f60126a3ab91b220ecf9f81b4da05a68231ad6fc5e944a1448bafab3d70774  ./kapp-darwin-amd64
fc40792f6c363b98ecf4d08fd95ce79ececc1076629eb3f1b5a2413b22a6ace2  ./kapp-windows-amd64.exe

k14s/ytt (k14s/ytt)

`v0.55.2`

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/ytt-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

# Make the binary executable
chmod +x /usr/local/bin/ytt

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

Bump go to v1.26.3 by @sameerforhttps://github.com/carvel-dev/ytt/pull/988ll/988
Bump OSS components github.com/hashicorp/go-version to v1.7.0 and github.com/BurntSuhi/toml to v1.5.0 by @G-Gohttps://github.com/carvel-dev/ytt/pull/993ll/993
Reduce allocation size when emitting yaml by @emh-juhttps://github.com/carvel-dev/ytt/pull/995ll/995
Allow md5.sum() to run under strict FIPS 140-3 enforcement by @sameerforhttps://github.com/carvel-dev/ytt/pull/1001l/1001

New Contributors

@G-Gobi made their first contributihttps://github.com/carvel-dev/ytt/pull/993ll/993

Full Changelog: carvel-dev/ytt@v0.55.1...v0.55.2

📂 Files Checksum

270f4446e8aefe6c73e5ac1901f60eb325213a9ba4d654c66bc028a1ec6056f8  ./ytt-windows-arm64.exe
7ca5bc2c8f7f854ac88d2e66c9ffd4a13439597fc2c32b342691e46a488318eb  ./ytt-windows-amd64.exe
32aa25be4f624d202059d82890f986ef96100ce7b031b17e3d5ce3298094cc25  ./ytt-linux-riscv64
6b09566cd9cbe90050c8685889aa1eef050c3f1168809df2486062e8a3ed1ec0  ./ytt-linux-arm64
512cc21193d3b0ce307b6e8db6ba8d40831f16e02526e1c753416456ea4319af  ./ytt-linux-amd64
4a61ebc3cace9ed6c1f2d4cc7285589e85c58869d96bc36cb0d09987ec14fcd1  ./ytt-darwin-arm64
b7b8435cd5cca719b933b0bc846a0f872bd2ed0c68fa9b74ec8369bef2ac0987  ./ytt-darwin-amd64

mikefarah/yq (mikefarah/yq)

`v4.53.6`

Compare Source

Fixing release build issue
- Fixed line wrapping bug (#2824, #2823) Thanks @mxey
- Bumped dependencies

`v4.53.4`

Compare Source

Close input files after processing each one (#2796) (#2808) Thanks @MsfPablo
Fixed non string HCL string keys (#2795)
Fixed heap allocation bug (#2809) Thanks @MsfPablo
Fix deleting commented empty list YAML output (#2765) Thanks @dpersek
Fix (has) return false for negative array indices (#2769) Thanks @maximilize
Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @maximilize
Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @vomba
Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @arcaven
Fix: reject negative indent instead of panicking (#2746) Thanks @StressTestor
Fix: parse signed hex and octal integers (#2749) Thanks @StressTestor
Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @StressTestor
Fix !!merge tag regression for yq (#2705) Thanks @W-Floyd
Default to yaml when a file's extension is not a recognised format (#2785) Thanks @devthedevil
Bumped dependencies

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 1pm on Monday,before 4pm on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added datasource/github-releases depName/k14s-kapp manager/regex labels Jun 22, 2026

renovate Bot assigned o-orand Jun 22, 2026

renovate Bot changed the title ~~Update K8s related bumps~~ Update dependency k14s/kapp to v0.65.3 Jun 25, 2026

renovate Bot force-pushed the renovate/k8s-related-bumps branch from 5cc5b13 to 8d4b66e Compare August 14, 2026 21:34

renovate Bot changed the title ~~Update dependency k14s/kapp to v0.65.3~~ Update K8s related bumps Aug 14, 2026

renovate Bot force-pushed the renovate/k8s-related-bumps branch 2 times, most recently from e7ec9e9 to 3d073df Compare August 20, 2026 11:56

Update K8s related bumps

503dd53

renovate Bot force-pushed the renovate/k8s-related-bumps branch from 3d073df to 503dd53 Compare August 25, 2026 15:51

Navigation Menu

Uh oh!

Update K8s related bumps - #202

Update K8s related bumps#202
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/k8s-related-bumps

renovate Bot commented Jun 22, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.65.4

Installation and signature verification

Installation

By downloading binary from the release

Via Homebrew (macOS or Linux)

Verify checksums file signature

Verify binary integrity

What's Changed

📂 Files Checksum

v0.65.3

Installation and signature verification

Installation

By downloading binary from the release

Via Homebrew (macOS or Linux)

Verify checksums file signature

Verify binary integrity

Changelog

What's Changed

📂 Files Checksum

v0.65.2

Installation and signature verification

Installation

By downloading binary from the release

Via Homebrew (macOS or Linux)

Verify checksums file signature

Verify binary integrity

✨ What's New

📂 Files Checksum

v0.65.1

Installation and signature verification

Installation

By downloading binary from the release

Via Homebrew (macOS or Linux)

Verify checksums file signature

Verify binary integrity

✨ What's new

📂 Files Checksum

v0.55.2

Installation and signature verification

Installation

By downloading binary from the release

Via Homebrew (macOS or Linux)

Verify checksums file signature

Verify binary integrity

What's Changed

New Contributors

📂 Files Checksum

v4.53.6

v4.53.4

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jun 22, 2026 •

edited

Loading

`v0.65.4`

`v0.65.3`

`v0.65.2`

`v0.65.1`

`v0.55.2`

`v4.53.6`

`v4.53.4`