fix(deps): update module carvel.dev/ytt to v0.52.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
carvel.dev/ytt	v0.51.1 -> v0.52.0

---

Release Notes

carvel-dev/ytt (carvel.dev/ytt)

v0.52.0

Compare Source

v0.51.2

Compare Source

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

### Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.2/ytt-linux-amd64

### Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt

### Make the binary executable
chmod +x /usr/local/bin/ytt

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

### Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.2/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.51.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

### Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

• Bump golang version to 1.23.7 by @​devanshuVmware in #​949
• golangci-lint linter fixes by @​devanshuVmware in #​951

Full Changelog: carvel-dev/ytt@v0.51.1...v0.51.2

📂 Files Checksum

4fa87a81af4634099c3a1c7396d4d0f0b6fee9f4854b37a6a547d55bfca897c5  ./ytt-darwin-arm64
61ad01f1df9cc8344c786e93acb1f5707ded9e4b52e4ec55a0f6637f2af53bae  ./ytt-linux-amd64
669eb82f2a3f646c593af3e2b2b7088f902a609770a8034e37779e9121d67e07  ./ytt-windows-amd64.exe
a25dd1c8b74f276a6ef2b4c2d0b493f8aaf87839e90762aa3c444e0b7eec95c8  ./ytt-darwin-amd64
ae0bdc3aca64e71276f59679ea9253be5f88fc6880937ae1de3dd42a00492a8c  ./ytt-linux-arm64
c648786f8b5237f62169960e1df09efc17ecbbc8d83c1dd0d5edf815ee57ae55  ./ytt-windows-arm64.exe

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: module carvel.dev/ytt@v0.52.0 requires go >= 1.24.2; switching to go1.24.2
go: downloading go1.24.2 (linux/amd64)
go: download go1.24.2: golang.org/toolchain@v0.0.1-go1.24.2.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off