| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| checksums.txt.pem | 2026-02-17 | 3.2 kB | |
| checksums.txt | 2026-02-17 | 590 Bytes | |
| checksums.txt.sig | 2026-02-17 | 96 Bytes | |
| ytt-linux-amd64 | 2026-02-17 | 17.3 MB | |
| ytt-linux-arm64 | 2026-02-17 | 16.2 MB | |
| ytt-windows-arm64.exe | 2026-02-17 | 16.2 MB | |
| ytt-darwin-amd64 | 2026-02-17 | 17.7 MB | |
| ytt-darwin-arm64 | 2026-02-17 | 16.7 MB | |
| ytt-linux-riscv64 | 2026-02-17 | 16.6 MB | |
| ytt-windows-amd64.exe | 2026-02-17 | 17.6 MB | |
| README.md | 2026-02-17 | 2.8 kB | |
| v0.53.1 source code.tar.gz | 2026-02-17 | 1.3 MB | |
| v0.53.1 source code.zip | 2026-02-17 | 1.9 MB | |
| Totals: 13 Items | 121.5 MB | 0 | |
Installation and signature verification
### Installation
#### By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
:::shell
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/ytt
#### Via Homebrew (macOS or Linux)
:::shell
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version
### Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC(Refer [this](https://docs.sigstore.dev/system_config/installation/) page for cosign installation). To validate the signature of this file, run the following commands:
:::shell
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.1/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
### Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
:::shell
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
What's Changed
- Bump golang to 1.25.7 to fix CVEs in [#976] from @CodesbyUnnati
Full Changelog: https://github.com/carvel-dev/ytt/compare/v0.53.0...v0.53.1
📂 Files Checksum
``` 2eaafe06d5e22203da2b74819685f9fd06ddc0a5cd38afc458821824990c78c0 ./ytt-darwin-arm64 36adcaa1f02681b0e7ceb73bda70ab11e3880588b51a188fd0318f6009bdeb36 ./ytt-windows-amd64.exe 5e479410a478385f6209624765e21c9880c07c6528ce6ed5e3dcca1e8b4a5677 ./ytt-linux-arm64 6b250c85d94b6b0643a58129ebf37244edb519fb9bc4aded1a8508d542d94ed3 ./ytt-linux-riscv64 764dadb577e680fa8fd09a28d281c570cb0e75accebb2ab0a328ab24b4032cfe ./ytt-darwin-amd64 cf675039fa1bde77ebd12ed79eeaa698f7d9862a2b5fd82078260974ec311649 ./ytt-windows-arm64.exe ecdc1439e52139335e42a23d1aa8941f575c52e70e58da709d2bad5038ecadae ./ytt-linux-amd64