##### Installation
##### By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
```shell
##### Download the binary
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/vendir-linux-amd64
##### Move the binary in to your PATH
mv vendir-linux-amd64 /usr/local/bin/vendir
##### Make the binary executable
chmod +x /usr/local/bin/vendir
```
##### Via Homebrew (macOS or Linux)
```shell
$ brew tap carvel-dev/carvel
$ brew install vendir
$ vendir version
```
##### Verify checksums file signature
Install cosign on your system https://docs.sigstore.dev/system_config/installation/
The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:
```shell
##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.sig
##### Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
```
##### Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
```shell
##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```
##### :sparkles: What's new
* fix: close tmp file before rename by @meier-christo[https://github.com/carvel-dev/vendir/pull/360](https://togithub.com/carvel-dev/vendir/pull/360)ll/360
* Make version more flexible to allow vendir to be used as a library by @joaopaperei[https://github.com/carvel-dev/vendir/pull/365](https://togithub.com/carvel-dev/vendir/pull/365)ll/365
* Update copyright headers by @prashantrew[https://github.com/carvel-dev/vendir/pull/369](https://togithub.com/carvel-dev/vendir/pull/369)ll/369
* Use latest github.com/carvel-dev/semver by @mamachan[https://github.com/carvel-dev/vendir/pull/373](https://togithub.com/carvel-dev/vendir/pull/373)ll/373
* Bump go version 1.22.2 and imgpkg v0.42.0 by @rcmadhankum[https://github.com/carvel-dev/vendir/pull/378](https://togithub.com/carvel-dev/vendir/pull/378)ll/378
##### :speaker: Callouts
* @prashantrewar made their first contributi[https://github.com/carvel-dev/vendir/pull/369](https://togithub.com/carvel-dev/vendir/pull/369)ll/369
* @grokspawn made their first contributi[https://github.com/carvel-dev/vendir/pull/370](https://togithub.com/carvel-dev/vendir/pull/370)ll/370
* @mamachanko made their first contributi[https://github.com/carvel-dev/vendir/pull/373](https://togithub.com/carvel-dev/vendir/pull/373)ll/373
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.40.0...v0.40.1
##### :open_file_folder: Files Checksum
3941cf7b7ba1219d574b93ce1bd8b77928ad9ff9cdf8e2debf3ae11ae695792f ./vendir-darwin-amd64
34974c9a6a6e32eb21adac47ce72df6340d36886b5ebe8b5937444a0d7ecc529 ./vendir-darwin-arm64
d7c602d8882085be78cd02a575a6c3b437bb2fa1ff1067712f593d8cf05c94fa ./vendir-linux-amd64
43e98922103ef30995a11bd4491b138b635c9b7bf17f98475fb5a06c87392e1d ./vendir-linux-arm64
7d240b999712e617021e057afeabf2803a89ab93ca91f44a58e063fa74d7eee3 ./vendir-windows-amd64.exe
### [`v0.40.0`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.40.0)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.39.1...v0.40.0)
Installation and signature verification
##### Installation
##### By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
```shell
##### Download the binary
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/vendir-linux-amd64
##### Move the binary in to your PATH
mv vendir-linux-amd64 /usr/local/bin/vendir
##### Make the binary executable
chmod +x /usr/local/bin/vendir
```
##### Via Homebrew (macOS or Linux)
```shell
$ brew tap carvel-dev/carvel
$ brew install vendir
$ vendir version
```
##### Verify checksums file signature
Install cosign on your system https://docs.sigstore.dev/system_config/installation/
The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:
```shell
##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/checksums.txt
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/checksums.txt.sig
##### Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
```
##### Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
```shell
##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```
##### :sparkles: What's new
* Fix codegeneration
* Force usage of Basic Auth when retrieving repositories from git when a flag is configured #361
* Enforce timeout when retrieving tags from a registry #329
* Normalize paths provided in the configuration file #341
* Do not allow overlapping paths #343
##### New Contributors
* @alexbarbato made their first contributi[https://github.com/carvel-dev/vendir/pull/344](https://togithub.com/carvel-dev/vendir/pull/344)ll/344
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.39.0...v0.40.0
##### :open_file_folder: Files Checksum
0bf3840619436908b11fce2c7015d928450b41a3b9ef19fecc6223ff2ed084a4 ./vendir-darwin-amd64
1b8e5eea893f78ed04b6834f24e1a69bbc9259cd7662bd7fe11283cdf8c482d0 ./vendir-windows-amd64.exe
3e076a452d88d6e3bc190d527f4d7c949ab6eccae19bf5d3cbb910d53724f2b9 ./vendir-linux-amd64
b6defba97d36e26e02df8b263de17061bbbc432365c9d26070eb7a837d7e33fc ./vendir-darwin-arm64
c43469a085dd0f6cebdab97a7747710f9dafa4886dd5e0ae7c1d3f975a12756e ./vendir-linux-arm64
### [`v0.39.1`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.39.1)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.39.0...v0.39.1)
Installation and signature verification
##### Installation
##### By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
```shell
##### Download the binary
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/vendir-linux-amd64
##### Move the binary in to your PATH
mv vendir-linux-amd64 /usr/local/bin/vendir
##### Make the binary executable
chmod +x /usr/local/bin/vendir
```
##### Via Homebrew (macOS or Linux)
```shell
$ brew tap carvel-dev/carvel
$ brew install vendir
$ vendir version
```
##### Verify checksums file signature
Install cosign on your system https://docs.sigstore.dev/system_config/installation/
The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:
```shell
##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/checksums.txt
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/checksums.txt.sig
##### Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
```
##### Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
```shell
##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```
##### :sparkles: What's new
* Bump go version 1.21.9 in line 39.x by @rcmadhankum[https://github.com/carvel-dev/vendir/pull/376](https://togithub.com/carvel-dev/vendir/pull/376)ll/376
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.39.0...v0.39.1
##### :open_file_folder: Files Checksum
e503602554411978e5c9a1129eab1dd89abd738c5c129379b0dcaf0baccb7d1f ./vendir-darwin-amd64
bc1506f17622f5dbba73c357c7185ed5461a78bbabe88c5e363c0ff9a9cf9541 ./vendir-darwin-arm64
8ef90d2b4365d7033e86c1ebe91d9d87fea69e32c3e5986b358d2b9862d710d8 ./vendir-linux-amd64
47172f99a1fe3cc57062f96ffb4908295daa0d43d92e250110b209767675f879 ./vendir-linux-arm64
1ec2929a78e031bea824c3b7bbe4092801e611ab506e46c9bf88af97df8fa653 ./vendir-windows-amd64.exe
### [`v0.39.0`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.39.0)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.38.0...v0.39.0)
Installation and signature verification
##### Installation
##### By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
```shell
##### Download the binary
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/vendir-linux-amd64
##### Move the binary in to your PATH
mv vendir-linux-amd64 /usr/local/bin/vendir
##### Make the binary executable
chmod +x /usr/local/bin/vendir
```
##### Via Homebrew (macOS or Linux)
```shell
$ brew tap carvel-dev/carvel
$ brew install vendir
$ vendir version
```
##### Verify checksums file signature
Install cosign on your system https://docs.sigstore.dev/system_config/installation/
The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:
```shell
##### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/checksums.txt
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/checksums.txt.sig
##### Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
```
##### Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
```shell
##### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```
##### :sparkles: What's new
* fix grammar in README by @vtrent[https://github.com/carvel-dev/vendir/pull/324](https://togithub.com/carvel-dev/vendir/pull/324)ll/324
* Added changes to sign artifacts by @kumaritanushr[https://github.com/carvel-dev/vendir/pull/339](https://togithub.com/carvel-dev/vendir/pull/339)ll/339
* Simplify gitignore and make sure all binaries are accounted for by @100m[https://github.com/carvel-dev/vendir/pull/351](https://togithub.com/carvel-dev/vendir/pull/351)ll/351
* PrivateKey with or without extra char as newline will be accepted by @kumaritanushr[https://github.com/carvel-dev/vendir/pull/349](https://togithub.com/carvel-dev/vendir/pull/349)ll/349
* Fix race condition when running multiple vendir from the same directory by @Zebrad[https://github.com/carvel-dev/vendir/pull/345](https://togithub.com/carvel-dev/vendir/pull/345)ll/345
* Refactor lazy sync code by @Zebrad[https://github.com/carvel-dev/vendir/pull/340](https://togithub.com/carvel-dev/vendir/pull/340)ll/340
* Fix: updated setup cosign step in release process by @kumaritanushr[https://github.com/carvel-dev/vendir/pull/352](https://togithub.com/carvel-dev/vendir/pull/352)ll/352
* updated release to have installation and verification steps included in release notes by @kumaritanushr[https://github.com/carvel-dev/vendir/pull/354](https://togithub.com/carvel-dev/vendir/pull/354)ll/354
##### New Contributors
* @vtrenton made their first contributi[https://github.com/carvel-dev/vendir/pull/324](https://togithub.com/carvel-dev/vendir/pull/324)ll/324
* @100mik made their first contributi[https://github.com/carvel-dev/vendir/pull/351](https://togithub.com/carvel-dev/vendir/pull/351)ll/351
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.38.0...v0.39.0
##### :open_file_folder: Files Checksum
012531a2f1a2de8bc89f1623edfc40a7ac5aee421fe609085278fb9e287f1cdf ./vendir-linux-arm64
20b71cc25dc3fea31edf9667c92a05167f713935f854882159736443c2f7a0e6 ./vendir-windows-amd64.exe
90ae82718c1072831f3097bdb031d5a897cc9f2f8334e2e1d7f35e35d0abd84f ./vendir-darwin-amd64
91ecf04ad5cdfa0f8839dc1430da7a4da665f7cb88c64c0c72202f6db261e651 ./vendir-darwin-arm64
feb2836153508adfb6fd33c127e466c9ce26577678e93a252be2fec445f4501f ./vendir-linux-amd64
### [`v0.38.0`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.38.0)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.37.1...v0.38.0)
##### :sparkles: What's new
- Bug fix: lazy sync clears vendor directory on second sync by [@fritzduchardt](https://togithub.com/fritzduchardt) in [https://github.com/carvel-dev/vendir/pull/322](https://togithub.com/carvel-dev/vendir/pull/322)
- Bug fix: vendir sync --directory option error by [@fritzduchardt](https://togithub.com/fritzduchardt) in [https://github.com/carvel-dev/vendir/pull/286](https://togithub.com/carvel-dev/vendir/pull/286)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.37.0...v0.38.0
##### :open_file_folder: Files Checksum
49076dd93ae931ac0d341d81e51b6fdb2288c718cfda8279b78e31c6d389da5f ./vendir-linux-amd64
7795fc1ccb82982b380b01ab617f4950d29dcecbf2daa5ac204654358ff79df5 ./vendir-windows-amd64.exe
88e3588632f58f44f31d3fa19f60d4aad8ea0075b6fc68956a9d061d8de2442d ./vendir-linux-arm64
a57a086d5153d00c7812b82227ab6f4eed7da3b7edae4c32a03a61a9fe114030 ./vendir-darwin-amd64
a9dba10fa543beedbf2144dd311d9c4014bfb992bb3f988f879ce44327cd7738 ./vendir-darwin-arm64
### [`v0.37.1`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.37.1)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.37.0...v0.37.1)
##### What's Changed
- Bug fix: lazy sync clears vendor directory on second sync in [https://github.com/carvel-dev/vendir/pull/328](https://togithub.com/carvel-dev/vendir/pull/328)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.37.0...v0.37.1
##### :open_file_folder: Files Checksum
89a67afb379e10c7b13dc6a71aee21a6dda3fc075480a429c55f324492f0c76a ./vendir-darwin-arm64
a35e07c323ae8a83a6223e05e937ab5b0b95fcfdbea18d06c1012552cc2e67cf ./vendir-linux-arm64
a999323aa4593c2b7c207e620f070d74c19bc074b48f3e7b7fe44cd057564791 ./vendir-darwin-amd64
b2869e8f27ace509c5885fd923789452932da3ed2a351e7ad1d0328b228ae17a ./vendir-linux-amd64
df488bc477a008805849dfff7e560e61d454c9e87267fd7689ca900cdf7837e8 ./vendir-windows-amd64.exe
### [`v0.37.0`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.37.0)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.36.1...v0.37.0)
##### :sparkles: What's new
- 🚨 For library users 🚨 the go module name changes to carvel.dev/vendir this is a breaking change on this version, no impact for users that only use the binaries
##### :open_file_folder: Files Checksum
0ca7ccb1dbc277b52547608988e89c98c70fa11cd7a409bb4be370383aa3a8ec ./vendir-darwin-amd64
7dde14730aa5a58511fc5b95f61162892ec97f87c9a57c01ab91d1f9f3d7aa74 ./vendir-linux-arm64
da8707a13443e6e18b7ee17d5d31a5461f090016e4816a48552b77bf443d0060 ./vendir-windows-amd64.exe
f1472bf7995506830fa79473f0ae406ea3885e0881fbbb096240efb1b053dd15 ./vendir-linux-amd64
f9a263959b8574d1f3f67bbf4ab2459dd9296903f3e3bfe1b4e90fa709886e5f ./vendir-darwin-arm64
### [`v0.36.1`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.36.1)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.36.0...v0.36.1)
##### What's Changed
- Bug fix: lazy sync clears vendor directory on second sync in [https://github.com/carvel-dev/vendir/pull/326](https://togithub.com/carvel-dev/vendir/pull/326)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.36.0...v0.36.1
##### :open_file_folder: Files Checksum
05441a693ce84ee0fc94c6011f8f53311aa48fa1bad8c46477e1594452e70074 ./vendir-linux-arm64
1a719b26d8b69714af3d178f651ed9b3332ffe52182ae51f1997461499c2c72f ./vendir-darwin-arm64
74b30532ffb11e797b12019ed01fdf904dac5669cbe917daf4cf8a61ebf90e2b ./vendir-darwin-amd64
a3540fa2bea687ae741b9610a23f8236f29eb387d8c597cdc9e1be07c51239c4 ./vendir-linux-amd64
b365b62062d6e4993c1cc50078f07ca11c51d05a02f9abecd4d8d27e0790035b ./vendir-windows-amd64.exe
### [`v0.36.0`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.36.0)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.35.4...v0.36.0)
##### :sparkles: What's new
- Only run sync for stable versions, if vendir.yaml has changed since last sync by [@fritzduchardt](https://togithub.com/fritzduchardt) [#278](https://togithub.com/carvel-dev/vendir/issues/278)
- Fix http retrieval when unpacking certain tar.gz files by [@reegnz](https://togithub.com/reegnz) in [#285](https://togithub.com/carvel-dev/vendir/issues/285)
- Enable skip TLS verification when retrieving a git repository by [@vmunishwar](https://togithub.com/vmunishwar) [#260](https://togithub.com/carvel-dev/vendir/issues/260)
##### 🔈 Callouts
[@reegnz](https://togithub.com/reegnz) made their first contribution in [#280](https://togithub.com/carvel-dev/vendir/issues/280)
[@fritzduchardt](https://togithub.com/fritzduchardt) made their first contribution in [#279](https://togithub.com/carvel-dev/vendir/issues/279)
##### :open_file_folder: Files Checksum
0575b5eac1545ac57792644d92033118c07e259f3f3a6fdc5077774baee3bd2e ./vendir-windows-amd64.exe
8a33d121e0fd9a3d841b9e4894be6d01e5d7376313ddf635346dedafb45ed374 ./vendir-linux-arm64
c977e8f4a350127bcd2bc5f05d33c3bee405f5dbe28928f1dc7af83489dcff40 ./vendir-darwin-arm64
d8f07fdb150ca27809f758a36cd1d98dc5100fcb361008b2ea00fff823195f0a ./vendir-darwin-amd64
ec42b2ae79bc06ecb1b5676937879e90f38894527e0d4de0ff6e764833f86528 ./vendir-linux-amd64
### [`v0.35.4`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.35.4)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.35.3...v0.35.4)
##### :sparkles: What's new
- Bump go version 1.21.9 in line 35.x by [@rcmadhankumar](https://togithub.com/rcmadhankumar) in [https://github.com/carvel-dev/vendir/pull/375](https://togithub.com/carvel-dev/vendir/pull/375)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.35.3...v0.35.4
##### :open_file_folder: Files Checksum
09652c164a7a131e5b68d7c85c0b101fe402ca6c0f82c17d697a7789f73655b5 ./vendir-darwin-amd64
8ff848ec0038e90a075f22e12f4967577d74954f22e3922ca34f12959eb40948 ./vendir-darwin-arm64
45357260958277f43c3a3237c6b5c77df5d0919a311253645ab3e015957ebbb4 ./vendir-linux-amd64
4f1b984df382d094e226d138c83389f1f2a4ae95a65e22b97c6bd98c051b1846 ./vendir-linux-arm64
a35b86a02de294948754539331d66439c4b53081b9c11ee35b4bfaf36cb5c6bd ./vendir-windows-amd64.exe
### [`v0.35.3`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.35.3)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.35.2...v0.35.3)
##### What's Changed
- Bump go1.21.5 by [@kumaritanushree](https://togithub.com/kumaritanushree) in [https://github.com/carvel-dev/vendir/pull/333](https://togithub.com/carvel-dev/vendir/pull/333)
- Bump imgpkg v0.38.3 by [@rcmadhankumar](https://togithub.com/rcmadhankumar) in [https://github.com/carvel-dev/vendir/pull/336](https://togithub.com/carvel-dev/vendir/pull/336)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.35.2...v0.35.3
##### :open_file_folder: Files Checksum
0bf333a88c35a7e09f116cad92336dcf6741c7abcb4794eb5ee9c1d872ed7a21 ./vendir-windows-amd64.exe
1dc363001d0d2542cf35058fb6cf86325f9d7c780bab1d584de94401db4493a4 ./vendir-darwin-arm64
4436f6f48dc0f17067a8cf907966ae17bd573f77dbcb3a1e8b69002494d387ae ./vendir-linux-arm64
4e88e2ccb9a7c72b79cad81a0391e30e7694cec0af114abb5cec81463d6dd7c4 ./vendir-linux-amd64
610f42df3c6af0a37524c7af6601c37707d1d148b28a3e598cdb0f40241e64da ./vendir-darwin-amd64
### [`v0.35.2`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.35.2)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.35.0...v0.35.2)
##### What's Changed
- Bump golang to 1.21.3 and imgpkg to v0.38.2 in v0.35.x line by [@sethiyash](https://togithub.com/sethiyash) in [https://github.com/carvel-dev/vendir/pull/316](https://togithub.com/carvel-dev/vendir/pull/316)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.35.0...v0.35.2
##### :open_file_folder: Files Checksum
15e991b5ab1b3b274f5868ff813ae4a00c17eae2c131f659efef46244d889123 ./vendir-darwin-amd64
8da68d1dd98df17101e21fbe0925a6cc4da557aeafc7b3cb9ffc4d0aa7157a9b ./vendir-linux-arm64
a0f28b86a4ef3800aaa54ad30bad449fd43a6af192a081748c67f2f48ad5cbd3 ./vendir-linux-amd64
afc3cd5dc7eb8f83582cda5993e6ec94a3dafac001bb6ca46cefd11e5a044ced ./vendir-darwin-arm64
bd325e76571c746d8fa3d703b2dee730032f8ac2469c6da962d1d1a3f3243f87 ./vendir-windows-amd64.exe
### [`v0.35.0`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.35.0)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.34.11...v0.35.0)
##### :sparkles: What's new
- Bumping go version to 1.21.1 by [@sethiyash](https://togithub.com/sethiyash) in [https://github.com/carvel-dev/vendir/pull/291](https://togithub.com/carvel-dev/vendir/pull/291)
- Bumping imgpkg version to v0.38.0 by [@sethiyash](https://togithub.com/sethiyash) in [https://github.com/carvel-dev/vendir/pull/295](https://togithub.com/carvel-dev/vendir/pull/295)
##### :open_file_folder: Files Checksum
791e7d275088a1439460d108b8d92df16b2f45b4f3e576d5557dfd21b344f1a9 ./vendir-darwin-amd64
a2810fef1123ee6eda307229f50b2e549b3ef14efb1ecdb2771405fdb0573f0c ./vendir-linux-arm64
ad9903183608a17ec5e581743ee75e88ac190a34399787f7450d356965c9f2bc ./vendir-darwin-arm64
b573519dc3cc4b8fa271d23b7de93aed2117d996a1a6aaaf858ac9f66c77ad46 ./vendir-windows-amd64.exe
d9109fb8f07bedab820b60e4789a2b183857073fa392cd603b9cabeac795ba04 ./vendir-linux-amd64
### [`v0.34.11`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.34.11)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.34.10...v0.34.11)
##### :sparkles: What's new
- Bump go version 1.22.2 in line 34.x by [@rcmadhankumar](https://togithub.com/rcmadhankumar) in [https://github.com/carvel-dev/vendir/pull/377](https://togithub.com/carvel-dev/vendir/pull/377)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.34.10...v0.34.11
##### :open_file_folder: Files Checksum
cb93ea67a90bc35d491100577a9ba0a387d998d4b704e053e9a5b1d5af3a753c ./vendir-darwin-amd64
a1d97a7ef1a9d977c6902d9fbdf1c904ba8c5eadbcc9bf015f59b16d551ff01b ./vendir-darwin-arm64
d9a622e4ae430ce83328c05616099b7d2bbb52577257d44700836defaae2b193 ./vendir-linux-amd64
f45107e84eb71c0ba83530609e32c7bafc4286f907a5852e4b2f8d2c68d7b898 ./vendir-linux-arm64
9ce787a49cedd8725e6c7f631f410c4cce16b8b906668f9e8f4b17ea919cf4be ./vendir-windows-amd64.exe
### [`v0.34.10`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.34.10)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.34.9...v0.34.10)
##### What's Changed
- Bump go1.20.12 by [@kumaritanushree](https://togithub.com/kumaritanushree) in [https://github.com/carvel-dev/vendir/pull/332](https://togithub.com/carvel-dev/vendir/pull/332)
- Bump imgpkg v0.37.9 by [@rcmadhankumar](https://togithub.com/rcmadhankumar) in [https://github.com/carvel-dev/vendir/pull/337](https://togithub.com/carvel-dev/vendir/pull/337)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.34.9...v0.34.10
##### :open_file_folder: Files Checksum
14e35ca3bf1aadf57765f3a566d04123fe1d3df92849c1f7390007c2326a500a ./vendir-windows-amd64.exe
1b26235cdb154707a0c5251aa2e0bf1d0d25ead7318e53d0823ff49883a6c694 ./vendir-darwin-arm64
1be8afdb43f096c9eac089eda3924fbe1a6b5ba36dee70a1312c0515573b3a99 ./vendir-linux-amd64
2ebb246662121ffac0eb0d9072bb7b189f9fa82f06e13b4b6f4c441a3eae9403 ./vendir-darwin-amd64
42631ff39515ba9683bbfe12cc1a9555f7937107aa3eeaa083bd86da78a20c05 ./vendir-linux-arm64
### [`v0.34.9`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.34.9)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.34.8...v0.34.9)
##### :sparkles: What's new
- [`d8e973f`](https://togithub.com/carvel-dev/vendir/commit/d8e973f) Bump go version to 1.20.11
- [`c482f8a`](https://togithub.com/carvel-dev/vendir/commit/c482f8a) Bump imgpkg to v0.37.8
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.34.8...v0.34.9
##### :open_file_folder: Files Checksum
119219007fad26babfa64ae9b8cb34b8bc1398be76adbbcf815954223ae88fc1 ./vendir-darwin-amd64
33b24254f9089ee5816458405feadadf3f62d4cce5cb82993097576dd8490384 ./vendir-linux-arm64
4ae3009c49e1193e63b3e8b6382724bef1fdc886ec8d44169018bca2ca5390a9 ./vendir-linux-amd64
76a7090fa6fa84bde13bef5ed59b8fc763d8cb7940932c76247a4726dc86cfb3 ./vendir-darwin-arm64
854817673b309a3a5f210e4632df25847e1406bfa95ffcfbc44ca2618f2d6aa8 ./vendir-windows-amd64.exe
### [`v0.34.8`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.34.8)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.34.7...v0.34.8)
##### What's Changed
- Bump go version to 1.20.10 in v0.34.x line by [@sethiyash](https://togithub.com/sethiyash) in [https://github.com/carvel-dev/vendir/pull/301](https://togithub.com/carvel-dev/vendir/pull/301)
- Bumping x/net to 0.17.0 in v0.34.x line by [@sethiyash](https://togithub.com/sethiyash) in [https://github.com/carvel-dev/vendir/pull/306](https://togithub.com/carvel-dev/vendir/pull/306)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.34.6...v0.34.8
##### :open_file_folder: Files Checksum
4cf82d042b03d72aa464f246b8ad5fae61b338e153dd96473087b07901c2d64b ./vendir-windows-amd64.exe
560de0870c062bd8feb8110a2c20b4edb9ef3dcc73abb5822c28f48a8a344bea ./vendir-linux-arm64
86c051bc164845972393a4b512c942dd9e838722dc42490d7a8f542a9163f72a ./vendir-darwin-arm64
ec952f962f64618a84456ea5be977ecdb6d8c81edcf730f16131b13f462d6e17 ./vendir-linux-amd64
fffeb6ff5f366bf4536f5016e51b6920957337e97dd287ce14c22d5539587d6f ./vendir-darwin-amd64
### [`v0.34.7`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.34.7)
[Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.34.6...v0.34.7)
##### What's Changed
- Bump go version to 1.20.10 in v0.34.x line by [@sethiyash](https://togithub.com/sethiyash) in [https://github.com/carvel-dev/vendir/pull/301](https://togithub.com/carvel-dev/vendir/pull/301)
**Full Changelog**: https://github.com/carvel-dev/vendir/compare/v0.34.6...v0.34.7
##### :open_file_folder: Files Checksum
0d41a1f2829efbc0cdc77dc543b99697d14e314b2f16556b23ef52b8116d24e5 ./vendir-linux-amd64
25a30249dfda484dceec650f17e6ac8a79b72c12b7ea8458926da3a7ac355497 ./vendir-linux-arm64
55aeae862becb344aa2768bd8c233dfb082d6a709fe8614b0202c5609107c043 ./vendir-darwin-arm64
8c44a01333a1e69641f268b4bdac1e2c32ea3fee78257b59c84070aceebc8ea7 ./vendir-windows-amd64.exe
c2c5658bf9f55e3239146d2cbbd43497cf5b3415e74036725a0a3d45af58c2f8 ./vendir-darwin-amd64
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v0.34.6->v0.40.1Release Notes
carvel-dev/vendir (carvel-dev/vendir)
### [`v0.40.1`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.40.1) [Compare Source](https://togithub.com/carvel-dev/vendir/compare/v0.40.0...v0.40.1)
##### Installation ##### By downloading binary from the release For instance, if you are using Linux on an AMD64 architecture: ```shell ##### Download the binary curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/vendir-linux-amd64 ##### Move the binary in to your PATH mv vendir-linux-amd64 /usr/local/bin/vendir ##### Make the binary executable chmod +x /usr/local/bin/vendir ``` ##### Via Homebrew (macOS or Linux) ```shell $ brew tap carvel-dev/carvel $ brew install vendir $ vendir version ``` ##### Verify checksums file signature Install cosign on your system https://docs.sigstore.dev/system_config/installation/ The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ##### Download the checksums file, certificate and signature curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.pem curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.sig ##### Verify the checksums file cosign verify-blob checksums.txt \ --certificate checksums.txt.pem \ --signature checksums.txt.sig \ --certificate-identity-regexp=https://github.com/carvel-dev \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. ```shell ##### Verify the binary using the checksums file sha256sum -c checksums.txt --ignore-missing ```Installation and signature verification
##### Installation ##### By downloading binary from the release For instance, if you are using Linux on an AMD64 architecture: ```shell ##### Download the binary curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/vendir-linux-amd64 ##### Move the binary in to your PATH mv vendir-linux-amd64 /usr/local/bin/vendir ##### Make the binary executable chmod +x /usr/local/bin/vendir ``` ##### Via Homebrew (macOS or Linux) ```shell $ brew tap carvel-dev/carvel $ brew install vendir $ vendir version ``` ##### Verify checksums file signature Install cosign on your system https://docs.sigstore.dev/system_config/installation/ The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ##### Download the checksums file, certificate and signature curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/checksums.txt curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/checksums.txt.pem curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.0/checksums.txt.sig ##### Verify the checksums file cosign verify-blob checksums.txt \ --certificate checksums.txt.pem \ --signature checksums.txt.sig \ --certificate-identity-regexp=https://github.com/carvel-dev \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. ```shell ##### Verify the binary using the checksums file sha256sum -c checksums.txt --ignore-missing ```Installation and signature verification
##### Installation ##### By downloading binary from the release For instance, if you are using Linux on an AMD64 architecture: ```shell ##### Download the binary curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/vendir-linux-amd64 ##### Move the binary in to your PATH mv vendir-linux-amd64 /usr/local/bin/vendir ##### Make the binary executable chmod +x /usr/local/bin/vendir ``` ##### Via Homebrew (macOS or Linux) ```shell $ brew tap carvel-dev/carvel $ brew install vendir $ vendir version ``` ##### Verify checksums file signature Install cosign on your system https://docs.sigstore.dev/system_config/installation/ The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ##### Download the checksums file, certificate and signature curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/checksums.txt curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/checksums.txt.pem curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.1/checksums.txt.sig ##### Verify the checksums file cosign verify-blob checksums.txt \ --certificate checksums.txt.pem \ --signature checksums.txt.sig \ --certificate-identity-regexp=https://github.com/carvel-dev \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. ```shell ##### Verify the binary using the checksums file sha256sum -c checksums.txt --ignore-missing ```Installation and signature verification
##### Installation ##### By downloading binary from the release For instance, if you are using Linux on an AMD64 architecture: ```shell ##### Download the binary curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/vendir-linux-amd64 ##### Move the binary in to your PATH mv vendir-linux-amd64 /usr/local/bin/vendir ##### Make the binary executable chmod +x /usr/local/bin/vendir ``` ##### Via Homebrew (macOS or Linux) ```shell $ brew tap carvel-dev/carvel $ brew install vendir $ vendir version ``` ##### Verify checksums file signature Install cosign on your system https://docs.sigstore.dev/system_config/installation/ The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ##### Download the checksums file, certificate and signature curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/checksums.txt curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/checksums.txt.pem curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.39.0/checksums.txt.sig ##### Verify the checksums file cosign verify-blob checksums.txt \ --certificate checksums.txt.pem \ --signature checksums.txt.sig \ --certificate-identity-regexp=https://github.com/carvel-dev \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. ```shell ##### Verify the binary using the checksums file sha256sum -c checksums.txt --ignore-missing ```Installation and signature verification
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.