checksums.json

{
  "meta": {
    "generated_by": "scripts/update-checksums.sh",
    "note": "Centralized metadata for tools: pinned version, retrieval commands, URL templates, archive format, and per-arch checksums. Keep this file authoritative for CI verification."
  },
  "tools": {
    "kubectl": {
      "pinned_version": "1.34.1",
      "archive_format": "raw-binary",
      "archive_url_template": "https://dl.k8s.io/release/v{version}/bin/linux/{arch}/kubectl",
      "checksum_url_template": "https://dl.k8s.io/release/v{version}/bin/linux/{arch}/kubectl.sha256",
      "latest_version_cmd": "curl -fsSL https://dl.k8s.io/release/stable.txt",
      "notes": "Official k8s binaries are served from dl.k8s.io (mirror CDN). Arch values: amd64, arm64, arm, 386, ppc64le, s390x, etc.",
      "checksums": {
        "1.34.1": {
          "amd64": "7721f265e18709862655affba5343e85e1980639395d5754473dafaadcaa69e3",
          "arm64": "420e6110e3ba7ee5a3927b5af868d18df17aae36b720529ffa4e9e945aa95450"
        }
      }
    },
    "helm": {
      "pinned_version": "3.18.6",
      "archive_format": "tar.gz",
      "archive_url_template": "https://get.helm.sh/helm-v{version}-linux-{arch}.tar.gz",
      "alternate_release_api": "https://api.github.com/repos/helm/helm/releases/tags/v{version}",
      "checksum_url_template": "https://get.helm.sh/helm-v{version}-linux-{arch}.tar.gz.sha256sum",
      "latest_version_cmd": "curl -s https://api.github.com/repos/helm/helm/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Helm provides release assets on GitHub and direct downloads on get.helm.sh. Arch values: amd64, arm, arm64, 386, ppc64le, s390x, riscv64.",
      "checksums": {
        "3.18.6": {
          "amd64": "3f43c0aa57243852dd542493a0f54f1396c0bc8ec7296bbb2c01e802010819ce",
          "arm64": "5b8e00b6709caab466cbbb0bc29ee09059b8dc9417991dd04b497530e49b1737"
        },
        "4.0.4": {
          "amd64": "29454bc351f4433e66c00f5d37841627cbbcc02e4c70a6d796529d355237671c",
          "arm64": "16b88acc6503d646b7537a298e7389bef469c5cc9ebadf727547abe9f6a35903"
        }
      }
    },
    "k9s": {
      "pinned_version": "0.50.9",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/derailed/k9s/releases/download/v{version}/k9s_Linux_{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/derailed/k9s/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "k9s release assets include checksums as a release attached `checksums.sha256` file. arch mapping: amd64 -> x86_64 for asset names.",
      "checksums": {
        "0.50.9": {
          "amd64": "5e625efa26c3e14256cf29d242179b32129183b549937ec62d0ad9be1bfe2ca4",
          "arm64": "147e696b608da9a300b9db6b35fd6dfc0713ce8c64865e550c90452696bb779a"
        },
        "0.50.18": {
          "amd64": "0b697ed4aa80997f7de4deeed6f1fba73df191b28bf691b1f28d2f45fa2a9e9b",
          "arm64": "d3dcc051d6be26ee911c00f583412802ebe203a189e51bc079332cb410c83b38"
        }
      }
    },
    "kustomize": {
      "pinned_version": "5.7.1",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv{version}/kustomize_v{version}_linux_{arch}.tar.gz",
      "checksum_asset": "checksums.txt",
      "latest_version_cmd": "curl -s https://api.github.com/repos/kubernetes-sigs/kustomize/releases/latest | jq -r '.tag_name' | sed 's#kustomize/##' | sed 's/^v//'",
      "notes": "Kustomize uses GitHub release tag like `kustomize/v5.7.1` — the download URL encodes that. Arch values: amd64, arm64, ppc64le, s390x, etc.",
      "checksums": {
        "5.7.1": {
          "amd64": "ea375e7372f9aa029129d4b2d16c66b7750b7f1213c4f66f910d981c895818d8",
          "arm64": "4261a040217df3bd6896597c3986d1465925726e4f22a945304b5233a4dcdbda"
        }
      }
    },
    "minikube": {
      "pinned_version": "",
      "archive_format": "binary/tar.gz/zip (varies)",
      "archive_url_template": "https://github.com/kubernetes/minikube/releases/download/v{version}/minikube-linux-{arch}",
      "checksum_url_template": "https://github.com/kubernetes/minikube/releases/download/v{version}/checksums.txt",
      "latest_version_cmd": "curl -s https://api.github.com/repos/kubernetes/minikube/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Minikube provides different assets (raw binary for linux amd64, tar/zip for others); fill checksums by running the generator.",
      "checksums": {
        "1.37.0": {
          "amd64": "d5cf561c71171152ff67d799f041ac0f65c235c87a1e9fc02a6a17b8226214d0",
          "arm64": "32f95860fffbbc825be38d05888542f10d3d580fe4d138f4aad71339b8038fb1"
        }
      }
    },
    "gitstatus": {
      "pinned_version": "1.5.4",
      "locked": true,
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/romkatv/gitstatus/releases/download/v{version}/gitstatusd-linux-{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/romkatv/gitstatus/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Asset names use `x86_64` for amd64; arch mapping: amd64 -> x86_64.",
      "checksums": {
        "1.5.4": {
          "amd64": "9633816e7832109e530c9e2532b11a1edae08136d63aa7e40246c0339b7db304",
          "arm64": "32b57eb28bf6d80b280e4020a0045184f8ca897b20b570c12948aa6838673225"
        }
      }
    },
    "gitstatusd": {
      "pinned_version": "1.5.4",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/romkatv/gitstatus/releases/download/v{version}/gitstatusd-linux-{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/romkatv/gitstatus/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Alias for gitstatus: provides the gitstatusd binary asset names.",
      "checksums": {
        "1.5.4": {
          "amd64": "9633816e7832109e530c9e2532b11a1edae08136d63aa7e40246c0339b7db304",
          "arm64": "32b57eb28bf6d80b280e4020a0045184f8ca897b20b570c12948aa6838673225",
          "x86_64": "9633816e7832109e530c9e2532b11a1edae08136d63aa7e40246c0339b7db304",
          "aarch64": "32b57eb28bf6d80b280e4020a0045184f8ca897b20b570c12948aa6838673225"
        }
      }
    },
    "gh": {
      "pinned_version": "",
      "archive_format": "deb/tar.gz/zip",
      "archive_url_template": "https://github.com/cli/cli/releases/download/v{version}/gh_{version}_linux_{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/cli/cli/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "GitHub CLI provides deb packages and tarballs; asset names vary. Fill checksums via generator or GitHub release assets.",
      "checksums": {
        "2.83.1": {
          "amd64": "1c5252d4ce3db07b51c01ff0b909583da6364ff3fdc06d0c2e75e62dc0380a34",
          "arm64": "36af472f8e96fd67253f813f71d9610624cc4e3c7a5b148459e42ffa1a933f64"
        },
        "2.83.2": {
          "amd64": "ca6e7641214fbd0e21429cec4b64a7ba626fd946d8f9d6d191467545b092015e",
          "arm64": "b1a0c0a0fcf18524e36996caddc92a062355ed014defc836203fe20fba75a38e"
        }
      }
    },
    "quarto": {
      "pinned_version": "1.10.18",
      "archive_format": "tar.gz / deb / pkg / msi",
      "archive_url_template": "https://github.com/quarto-dev/quarto-cli/releases/download/v{version}/quarto-{version}-linux-{arch}.tar.gz",
      "checksum_asset": "quarto-{version}-checksums.txt",
      "latest_version_cmd": "curl -s https://api.github.com/repos/quarto-dev/quarto-cli/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Quarto publishes a checksums text file in each release; arch values: amd64, arm64, rhel7-amd64, etc.",
      "checksums": {
        "1.8.24": {
          "amd64": "6b83c1c9b6f2ce6454798b42260bd2ee184551d74debe817b8aaf28b09ac22d0",
          "arm64": "89a97a65a242a5b9b010a9f9978928c1d8e4ac02a558c9cd91a110c3f2611fdd"
        },
        "1.10.18": {
          "amd64": "afad071b5bd22c02f2d300695743189d3650e0537a53073e654b630cff2b0c73",
          "arm64": "f6a07df68e25330b5df34f65d3df66bca605acce3b830c593a58e91884d4cf6c"
        }
      }
    },
    "code-server": {
      "pinned_version": "4.95.1-rc.2",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/coder/code-server/releases/download/v{version}/code-server-{version}-linux-{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/coder/code-server/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Code-Server release assets are published on GitHub. Arch values: amd64, arm64.",
      "checksums": {
        "4.95.1-rc.2": {},
        "4.108.0": {
          "amd64": "eefeebffb275eb64463a3e03937815a1cd551cc2f765865b12a06e70e24ab5cf",
          "arm64": "0e441373e3e1dd5af907677eab9759844f8685cf2533801c3e367282f71f16ff"
        }
      }
    },
    "ijava": {
      "pinned_version": "1.4.6-pr12",
      "archive_format": "zip",
      "archive_filename": "IJava-{version}.zip",
      "archive_url_template": "https://github.com/ebpro/IJava/releases/download/v{version}/IJava-{version}.zip",
      "notes": "IJava distribution zip produced by CI (contains install.py and JAR).",
      "checksums": {
        "1.4.5": {
          "amd64": "8336fbcf26cc570fbf33ee52a2e6051d865214355654e32218467db49658f2b5"
        },
        "1.4.6-pr12": {
          "amd64": "c2fa3bcb3fc22602e7e116bf0f2590dcc521ebf8cecb347885b799919ab6a870",
          "arm64": "c2fa3bcb3fc22602e7e116bf0f2590dcc521ebf8cecb347885b799919ab6a870"
        }
      }
    },
    "git-lfs": {
      "pinned_version": "3.4.1",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/git-lfs/git-lfs/releases/download/v{version}/git-lfs-linux-{arch}-v{version}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/git-lfs/git-lfs/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Git LFS release assets include checksums in the release notes; arch values: amd64, arm64, x86_64, aarch64, arm.",
      "checksums": {
        "3.4.1": {
          "amd64": "1772dc260961db27958088740b7e9ecebf945abad8c2d504d412448f53faf147",
          "arm64": "f93c5070223d95eb44fea0ee2f2db26656793d5f3417366f77dd20b9518c46ce",
          "x86_64": "1772dc260961db27958088740b7e9ecebf945abad8c2d504d412448f53faf147",
          "aarch64": "f93c5070223d95eb44fea0ee2f2db26656793d5f3417366f77dd20b9518c46ce"
        }
      }
    },
    "tinytex": {
      "pinned_version": "2026.09",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/rstudio/tinytex-releases/releases/download/v{version}/installer-unix-v{version}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/rstudio/tinytex-releases/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "TinyTeX unix installer; same asset for amd64/arm64.",
      "checksums": {
        "2026.09": {
          "amd64": "aaf6e0115b1419bafe45c368ae41f46abe024d21556c989db17707698bf69080",
          "arm64": "aaf6e0115b1419bafe45c368ae41f46abe024d21556c989db17707698bf69080",
          "x86_64": "aaf6e0115b1419bafe45c368ae41f46abe024d21556c989db17707698bf69080",
          "aarch64": "aaf6e0115b1419bafe45c368ae41f46abe024d21556c989db17707698bf69080"
        }
      }
    },
    "miniforge": {
      "pinned_version": "25.11.0-1",
      "archive_format": "sh",
      "archive_url_template": "https://github.com/conda-forge/miniforge/releases/download/{version}/Miniforge3-{version}-Linux-{arch}.sh",
      "latest_version_cmd": "curl -fsSL https://api.github.com/repos/conda-forge/miniforge/releases/latest | jq -r '.tag_name'",
      "notes": "Miniforge installer sh; arch values: x86_64, aarch64, amd64, arm64. Checksums are released per-asset.",
      "checksums": {
        "25.11.0-1": {
          "x86_64": "be1bad9d4e67a8753eb76fb4940e9a08036786675c7adf060627e55791bf110d",
          "aarch64": "43a3783f9e121088f1c92b131b4305b9ebf159424ad2543dfcfc0f1952b5e127",
          "amd64": "be1bad9d4e67a8753eb76fb4940e9a08036786675c7adf060627e55791bf110d",
          "arm64": "43a3783f9e121088f1c92b131b4305b9ebf159424ad2543dfcfc0f1952b5e127"
        }
      }
    },
    "chrome-headless-shell": {
      "pinned_version": "155.0.8059.39",
      "archive_format": "zip",
      "archive_url_template": "https://storage.googleapis.com/chrome-for-testing-public/{version}/{platform}/chrome-headless-shell-{platform}.zip",
      "notes": "Chrome Headless Shell from the official Chrome-for-Testing distribution. Platform values: linux64 (amd64), linux-arm64 (arm64). Bypasses 'quarto install chrome-headless-shell' (Quarto 1.10.x CDN 404s). Checksums computed from the served bytes (no official manifest carries them); CfT URLs are immutable per version.",
      "checksums": {
        "155.0.8059.39": {
          "amd64": "39dcb8c46550632a3d911850ab3b8af840b4e3f6d8622faa2018eb8756278786",
          "arm64": "9fb86f7c0b2734c5febc0bbb4e85f37da43553f3f8a7970949828c5713e87e94",
          "x86_64": "39dcb8c46550632a3d911850ab3b8af840b4e3f6d8622faa2018eb8756278786",
          "aarch64": "9fb86f7c0b2734c5febc0bbb4e85f37da43553f3f8a7970949828c5713e87e94"
        }
      }
    },
    "kotlin-jupyter": {
      "pinned_version": "0.19.0.944",
      "archive_format": "whl",
      "archive_url_template": "https://files.pythonhosted.org/packages/cf/bc/2cd20bddab3e790b1307379bd91a15a405f241646b4122329c59dd55d867/kotlin_jupyter_kernel-0.19.0.944-py3-none-any.whl",
      "latest_version_cmd": "curl -fsSL https://pypi.org/pypi/kotlin-jupyter-kernel/json | jq -r '.info.version'",
      "notes": "Kotlin Jupyter kernel (Kotlin/kotlin-jupyter), PyPI package 'kotlin-jupyter-kernel'. Upstream publishes NO GitHub Releases and NO sdist; PyPI is the only source. The wheel is py3-none-any (pure-Python launcher; arch-independent, so amd64/arm64 digests are identical by construction) but embeds ~80 MB of JVM jars including its OWN Kotlin compiler runtime (kotlin-script-runtime-2.4.0-dev-6891.jar) — the kernel version pins the kernel package release, NOT the Kotlin language level of notebooks, and is independent of the SDKMAN KOTLIN_VERSION. PyPI marks the package 'Development Status :: 4 - Beta'. requires_dist is null; upstream's own conda recipe installs it with --no-deps. pip install writes the kernelspec to <sys.prefix>/share/jupyter/kernels/kotlin via the wheel's *.data/data payload (verified against the 0.19.0.944 wheel: 9,548 B RECORD, kernel.json argv 'python -m run_kotlin_kernel {connection_file}').",
      "checksums": {
        "0.19.0.944": {
          "amd64": "dc654a426a28e6621aeb0bd7772d268a9a877aabae4a17b73383752a416281a3",
          "arm64": "dc654a426a28e6621aeb0bd7772d268a9a877aabae4a17b73383752a416281a3"
        }
      }
    },
    "tilt": {
      "pinned_version": "0.36.0",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/tilt-dev/tilt/releases/download/v{version}/tilt.{version}.linux.{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/tilt-dev/tilt/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "Tilt ships a checksums.txt manifest on each release; asset arch mapping: amd64 -> x86_64 (tilt.{version}.linux.x86_64.tar.gz), arm64 -> arm64. Digested version comes from that manifest, cross-confirmed against GitHub per-asset API digests.",
      "checksums": {
        "0.36.0": {
          "amd64": "9ce610083efc76ffa518ec9b001ddb1711b652adce3333f57ffff6be50ad9719",
          "arm64": "1fb79ec7609c9d430c29c66d9d1c12c2a58aaf2314bf42d7372105f8ab2eb4ce"
        }
      }
    },
    "hadolint": {
      "pinned_version": "2.12.0",
      "archive_format": "raw-binary",
      "archive_url_template": "https://github.com/hadolint/hadolint/releases/download/v{version}/hadolint-Linux-{arch}",
      "latest_version_cmd": "curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "hadolint Dockerfile linter. GitHub release asset arch mapping: amd64 -> x86_64 (hadolint-Linux-x86_64), arm64 -> arm64 (hadolint-Linux-arm64). Raw binary, no archive. Digests computed from the served bytes.",
      "checksums": {
        "2.12.0": {
          "amd64": "56de6d5e5ec427e17b74fa48d51271c7fc0d61244bf5c90e828aab8362d55010",
          "arm64": "5798551bf19f33951881f15eb238f90aef023f11e7ec7e9f4c37961cb87c5df6"
        }
      }
    },
    "ctop": {
      "pinned_version": "0.7.7",
      "archive_format": "raw-binary",
      "archive_url_template": "https://github.com/bcicen/ctop/releases/download/v{version}/ctop-{version}-linux-{arch}",
      "latest_version_cmd": "curl -s https://api.github.com/repos/bcicen/ctop/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "ctop container monitoring tool. Asset name is version-prefixed WITHOUT the leading 'v' (ctop-0.7.7-linux-amd64) while the release tag carries it (v0.7.7). Arch values pass through (amd64, arm64). Raw binary, no archive. Digests computed from the served bytes.",
      "checksums": {
        "0.7.7": {
          "amd64": "b78374734ebe3d14b6edee3d5512c911c250d7fa7f3f964cb00acd3bc5a02a09",
          "arm64": "d8d91e0fea53a8c78fa81192f078272e5a92f0ea6c4f0e38ec7c944d76e6f02f"
        }
      }
    },
    "dive": {
      "pinned_version": "0.12.0",
      "archive_format": "tar.gz",
      "archive_url_template": "https://github.com/wagoodman/dive/releases/download/v{version}/dive_{version}_linux_{arch}.tar.gz",
      "latest_version_cmd": "curl -s https://api.github.com/repos/wagoodman/dive/releases/latest | jq -r '.tag_name' | sed 's/^v//'",
      "notes": "dive image layer explorer. tar.gz carrying the 'dive' binary at the archive root. Arch values pass through (amd64, arm64). Digests computed from the served archive bytes (unextracted, matching the toolcache staging rule).",
      "checksums": {
        "0.12.0": {
          "amd64": "20a7966523a0905f950c4fbf26471734420d6788cfffcd4a8c4bc972fded3e96",
          "arm64": "a2a1470302cdfa367a48f80b67bbf11c0cd8039af9211e39515bd2bbbda58fea"
        }
      }
    }
  }
}