Ensure we close the reader. (#1389)

Author: n-g

go.mod

@@ -146,7 +146,7 @@ require (
 	k8s.io/utils v0.0.0-20230726121419-3b25d923346b
 	namespacelabs.dev/go-filenotify v0.0.0-20220511192020-53ea11be7eaa
 	namespacelabs.dev/go-ids v0.0.0-20221124082625-9fc72ee06af7
-	namespacelabs.dev/integrations v0.0.0-20250204162145-bf23e51e3a44
+	namespacelabs.dev/integrations v0.0.0-20250205140238-018cebec5056
 	sigs.k8s.io/controller-runtime v0.16.3
 	sigs.k8s.io/yaml v1.3.0
 )

go.sum

@@ -1626,8 +1626,8 @@ namespacelabs.dev/go-filenotify v0.0.0-20220511192020-53ea11be7eaa h1:jj2kjs0Hvu
 namespacelabs.dev/go-filenotify v0.0.0-20220511192020-53ea11be7eaa/go.mod h1:e8NJRaInXRRm1+KPA6EkGEzdLJAgEvVSIKiLzpP97nI=
 namespacelabs.dev/go-ids v0.0.0-20221124082625-9fc72ee06af7 h1:8NlnfPlzDSJr8TYV/qarIWwhjLd1gOXf3Jme0M/oGBM=
 namespacelabs.dev/go-ids v0.0.0-20221124082625-9fc72ee06af7/go.mod h1:J+Sd+ngeffnCsaO/M7zgs2bR8Klq/ZBhS0+bbnDEH2M=
-namespacelabs.dev/integrations v0.0.0-20250204162145-bf23e51e3a44 h1:3I6V424BbgE2abTCFpnIy29YYFSOwICL0Lgu8aV5gaU=
-namespacelabs.dev/integrations v0.0.0-20250204162145-bf23e51e3a44/go.mod h1:EKagMwZRHyVu1pfGGzR/2C9j9exM7/aTnsx6wJ5Chs0=
+namespacelabs.dev/integrations v0.0.0-20250205140238-018cebec5056 h1:fTzJChbZlnbPZcqDg4jHXDKT6pmeaG5eiO0zuOiTyYE=
+namespacelabs.dev/integrations v0.0.0-20250205140238-018cebec5056/go.mod h1:EKagMwZRHyVu1pfGGzR/2C9j9exM7/aTnsx6wJ5Chs0=
 oras.land/oras-go v1.2.5 h1:XpYuAwAb0DfQsunIyMfeET92emK8km3W4yEzZvUbsTo=
 oras.land/oras-go v1.2.5/go.mod h1:PuAwRShRZCsZb7g8Ar3jKKQR/2A/qN+pkYxIOd/FAoo=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=

internal/cli/cmd/cluster/artifact.go

@@ -106,6 +106,7 @@ func newArtifactDownloadCmd() *cobra.Command {
 		if err != nil {
 			return err
 		}
+		defer reader.Close()
 
 		w, err := os.Create(dest)
 		if err != nil {