anchor.diff:  # But it must be done in base or the last FROM, because it does not install to /go/bin
   
   ############################################################
  -FROM golang:1.18 AS external-go-gets
  -
  -ARG KUBETEST2_VERSION=5e5d3e9eebc6a609aa428bd3e2a1c0c3566d5baf
  +FROM golang:1.19 AS external-go-gets
  +
  +ARG KUBETEST2_VERSION=a46ae8d7fa3745577930887a46a9841d8b5d06e0
  +ARG KUBETEST2_KOPS_VERSION=9b957a1d6189ee612506c9b6dc5b8b1a19e9c2aa # v1.25.0 release
   ARG KIND_VERSION=v0.14.0
  -ARG KO_VERSION=3d362cf6702fee7ffeb96f300fc092a4b333868e # v0.11.3-0.20220715180928-3d362cf6702f
  +ARG KO_VERSION=v0.12.0
   ARG PROTOC_GEN_GO_VERSION=v1.28.0
   ARG PROTOC_GEN_GOGOFASTER_VERSION=v1.3.2
   ARG GOTESTSUM_VERSION=v1.8.1
   ARG KAIL_VERSION=v0.15.0
  -ARG LICHE_VERSION=v0.0.0-20200229003944-f57a5d1c5be4
   ARG GO_LICENSES_VERSION=v1.2.1
   ARG DOCKER_CREDENTIAL_GCR_VERSION=v2.0.5
   ARG JSONNET_VERSION=v0.18.0
  -ARG GOJSONTOYAML_VERSION=v0.1.0
  -ARG COSIGN_VERSION=v1.9.0
  +ARG COSIGN_VERSION=v1.12.1
   
   # Extra tools through go install
   # These run using the golang image version of Go, not any defined by `gvm`
   RUN go install github.com/google/ko@${KO_VERSION}
   RUN go install github.com/boz/kail/cmd/kail@${KAIL_VERSION}
   RUN go install gotest.tools/gotestsum@${GOTESTSUM_VERSION}
  -RUN go install github.com/raviqqe/liche@${LICHE_VERSION}  # stable liche version for checking md links
   RUN go install sigs.k8s.io/kind@${KIND_VERSION}
   RUN go install sigs.k8s.io/kubetest2@${KUBETEST2_VERSION}
   RUN go install sigs.k8s.io/kubetest2/kubetest2-gke@${KUBETEST2_VERSION}
  
positive.code: # See the License for the specific language governing permissions and
  # limitations under the License.
  
  FROM debian:bullseye-20220711-slim AS base
  
  # Pinned versions of stuff we pull in
  ARG CLOUD_SDK_VERSION=393.0.0
  ARG KUBECTL_VERSION=v1.23.8
  ARG DOCKER_VERSION=5:20.10.17~3-0~debian-bullseye
  ARG MAVEN_VERSION=3.8.4
  ARG JAVA_VERSION=16
  ARG PROTOC_VERSION=3.17.0
  ARG TFENV_VERSION=v2.2.3
  ARG COMMIT_HASH
  
  RUN echo "${COMMIT_HASH}" > /commit_hash
  
negative.code: RUN curl -fsSL "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" -o /usr/local/bin/kubectl && \
      chmod +x /usr/local/bin/kubectl
  
  # kops
  RUN curl -fsSL https://github.com/kubernetes/kops/releases/download/${KOPS_VERSION}/kops-linux-amd64 -o /usr/local/bin/kops && \
      chmod +x /usr/local/bin/kops
  
  # tfenv
  RUN git clone -b ${TFENV_VERSION} https://github.com/tfutils/tfenv.git ~/.tfenv && \
      ln -s ~/.tfenv/bin/* /usr/local/bin
  