[dependabot]

Bumps github.com/vmware-tanzu/carvel-imgpkg from 0.38.0 to 0.110.4.

Release notes

Sourced from github.com/vmware-tanzu/carvel-imgpkg's releases.

v0.47.2

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/imgpkg-linux-amd64
Move the binary in to your PATH
mv imgpkg-linux-amd64 /usr/local/bin/imgpkg
Make the binary executable
chmod +x /usr/local/bin/imgpkg

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install imgpkg
$ imgpkg version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/checksums.txt
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/imgpkg/releases/download/v0.47.2/checksums.txt.sig
Verify the checksums file
cosign verify-blob checksums.txt 
--certificate checksums.txt.pem 
--signature checksums.txt.sig 
--certificate-identity-regexp=https://github.com/carvel-dev 
--certificate-oidc-issuer=https://github.com/proxy/token.actions.githubusercontent.com/

Verify binary integrity

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.01%. Comparing base (b9fd1a0) to head (90db63c).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #529   +/-   ##
=======================================
  Coverage   73.01%   73.01%           
=======================================
  Files          28       28           
  Lines        1460     1460           
=======================================
  Hits         1066     1066           
  Misses        324      324           
  Partials       70       70           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.