Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[chore] bump docker/docker, docker/cli to v25.0.5 #370

Merged
merged 1 commit into from Mar 27, 2024

Conversation

grokspawn
Copy link
Contributor

@grokspawn grokspawn commented Mar 26, 2024

related to moby/moby#47538

Some of the indirect deps cannot be resolved until those project update & release, so this is incomplete but at least updates the direct deps

go mod graph output after changes:

carvel.dev/vendir github.com/docker/cli@v25.0.5+incompatible
carvel.dev/imgpkg@v0.40.0 github.com/docker/cli@v24.0.0+incompatible
github.com/google/go-containerregistry@v0.16.1 github.com/docker/cli@v24.0.0+incompatible
carvel.dev/vendir github.com/docker/docker@v25.0.5+incompatible
carvel.dev/imgpkg@v0.40.0 github.com/docker/docker@v24.0.7+incompatible
github.com/google/go-containerregistry@v0.16.1 github.com/docker/docker@v24.0.0+incompatible

Signed-off-by: Jordan Keister <jordan@nimblewidget.com>
Copy link
Member

@joaopapereira joaopapereira left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@joaopapereira joaopapereira merged commit 58ff583 into carvel-dev:develop Mar 27, 2024
5 checks passed
renovate bot added a commit to mykso/myks that referenced this pull request Apr 20, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [carvel.dev/vendir](https://togithub.com/carvel-dev/vendir) |
`v0.40.0` -> `v0.40.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/carvel.dev%2fvendir/v0.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/carvel.dev%2fvendir/v0.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/carvel.dev%2fvendir/v0.40.0/v0.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/carvel.dev%2fvendir/v0.40.0/v0.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>carvel-dev/vendir (carvel.dev/vendir)</summary>

###
[`v0.40.1`](https://togithub.com/carvel-dev/vendir/releases/tag/v0.40.1)

[Compare
Source](https://togithub.com/carvel-dev/vendir/compare/v0.40.0...v0.40.1)

<details>

<summary><h2>Installation and signature verification</h2></summary>

##### Installation
##### By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/vendir-linux-amd64

### Move the binary in to your PATH
mv vendir-linux-amd64 /usr/local/bin/vendir

### Make the binary executable
chmod +x /usr/local/bin/vendir
```

##### Via Homebrew (macOS or Linux)

```shell
$ brew tap carvel-dev/carvel
$ brew install vendir
$ vendir version  
```

##### Verify checksums file signature

Install cosign on your system
https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.40.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature.

```shell

### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
```

</details>

### ✨ What's new
* fix: close tmp file before rename by
@&#8203;meier-christo[carvel-dev/vendir#360
* Make version more flexible to allow vendir to be used as a library by
@&#8203;joaopaperei[carvel-dev/vendir#365
* Update copyright headers by
@&#8203;prashantrew[carvel-dev/vendir#369
* Use latest github.com/carvel-dev/semver by
@&#8203;mamachan[carvel-dev/vendir#373
* Bump go version 1.22.2 and imgpkg v0.42.0 by
@&#8203;rcmadhankum[carvel-dev/vendir#378

### 🔈 Callouts
* @&#8203;prashantrewar made their first
contributi[carvel-dev/vendir#369
* @&#8203;grokspawn made their first
contributi[carvel-dev/vendir#370
* @&#8203;mamachanko made their first
contributi[carvel-dev/vendir#373

**Full Changelog**:
carvel-dev/vendir@v0.40.0...v0.40.1

### 📂 Files Checksum

3941cf7b7ba1219d574b93ce1bd8b77928ad9ff9cdf8e2debf3ae11ae695792f
./vendir-darwin-amd64
34974c9a6a6e32eb21adac47ce72df6340d36886b5ebe8b5937444a0d7ecc529
./vendir-darwin-arm64
d7c602d8882085be78cd02a575a6c3b437bb2fa1ff1067712f593d8cf05c94fa
./vendir-linux-amd64
43e98922103ef30995a11bd4491b138b635c9b7bf17f98475fb5a06c87392e1d
./vendir-linux-arm64
7d240b999712e617021e057afeabf2803a89ab93ca91f44a58e063fa74d7eee3
./vendir-windows-amd64.exe

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log [here](https://developer.mend.io/github/mykso/myks).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMDEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjMwMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

2 participants