v0.31.4

What's Changed

Fixes

• Fix helm chart clobbering and differences with Zarf and Helm chart names along with new repoName key by @Racer159 in #2174
• Add message asking if the user has init'ed their cluster and slim down error messages more generally by @AustinAbro321 in #2177
• Fix compose dropping the only.localOS filter from the composed package by @Racer159 in #2173

Docs

• Update the Airgap Software Delivery course name by @AustinAbro321 in #2172
• Promote the Quick Start section to Getting Started by @Racer159 in #2182

Deps

• Update actions/setup-go action to v5 by @renovate in #2179
• Update all non-major dependencies by @renovate in #2099
• Update github.com/anchore/clio digest to 767f622 by @renovate in #2186

Full Changelog: v0.31.3...v0.31.4

v0.31.3

What's Changed

Features

• Introduce zarf prepare lint to perform schema validation and lay groundwork for standardizing best practices by @AustinAbro321 in #2075
• Add zarf package remove/inspect completion for package names from cluster sources by @WeaponX314 in #2151
• Add a warning when no components are selected for deployment in a package by @bdw617 in #2167

Fixes

• Improve Helm rollback logic, messaging, and support for local tarballs by @Racer159 in #2157

Docs

• Fix link and content issues across the docs by @AustinAbro321 in #2168

Dependencies

• Update component-webhooks example to use new Pepr k8s fluent client by @lucasrod16 in #2090
• Update k8s.io/utils digest to cf03d44 then to b307cd5 by @renovate in #2156 and #2161
• Update github.com/anchore/stereoscope digest to 3610f4e by @renovate in #2155

Development

• Move the cluster library from internal to pkg to make it available to consumers by @Noxsios in #2162
• Promote @lucasrod16 to be a full maintainer by @Racer159 in #2166

Full Changelog: v0.31.2...v0.31.3

v0.31.2

What's Changed

Fixes

• Add warnings to better log the errors encountered on image push retries by @Racer159 in #2147
• Make set -e (and $ErrorActionPreference = 'Stop';) the default for multiline actions so that they fail correctly by @UncleGedd in #2148

Docs

• Improve the docs for zarf tools k9s options and other command examples by @Racer159 in #2132

Dependencies

• [security] Update module github.com/sigstore/cosign/v2 to v2.2.1 by @renovate in #2134

Development

• Fix race condition in TestValidateLastNonBreakingVersion unit test by @lucasrod16 in #2138
• Split up the e2e tests that need a cluster, versus ones that do not to speed up CI by @bdw617 in #2139
• Update external tests to run in a unique k3d cluster and use the same Gitea chart as Zarf by @bdw617 in #2145

Full Changelog: v0.31.1...v0.31.2

v0.31.1

What's Changed

Features

• Allow passing additional arguments to k9s when invoked by zarf tools monitor by @WeaponX314 in #2095
• Add REGISTRY_CA_BUNDLE variable to registry package and chart to improve S3 backed registries by @AbrohamLincoln in #2008
• Add GIT_SERVER_DISABLE_REGISTRATION variable to allow for Gitea registration, so that SSO can be used by @dgershman in #2118
• [Library Only] Initial implementation of Helm Chart overrides at deploy time by @Racer159 in #2131

Fixes

• Properly handle variable and constant merging when using composable components by @Racer159 in #2129
• Use the node name instead of the hostname label to build the injector pod by @Racer159 in #2119
• Resolve pathing issues while loading images with Zarf on Windows by @Racer159 in #2106
• Add an error channel for progress bar rendering to properly stop the progress bar when used as a library by @UncleGedd in #2117
• Keep a useable empty dir volume within the registry even when persistence is disabled by @Racer159 in #2124

Docs

• Update the Zarf overview to be more clear about how Zarf works by @Racer159 in #2122

Full Changelog: v0.31.0...v0.31.1

v0.31.0

What's Changed

⚠️ Breaking Changes

• Signing Zarf packages is now done with --signing-key and --signing-key-pass - the old --key flag is deprecated on zarf package create and has been removed from zarf package publish to support public keys instead
• Component composability (import.path) must point to a directory, pointing to a zarf.yaml directly is no longer supported

NOTE: These are mostly edge cases on zarf package create and don't impact zarf package deploy. If you are using either feature though ensure you update your package create process.

Features

• Introduce the only.flavor filter to allow building of package variants and provide a replacement for some group use cases by @Racer159 in #2105
• Add --no-progress to the zarf tools wait-for sub command by @WeaponX314 in #2093
• Expose Gitea image templates to custom init packages by @TristanHoladay in #2069

Rollup From v0.30 Patch Releases

• Support mirroring non-image artifacts (i.e. Cosign signatures, OCI Helm Charts, etc) under the images key by @mjnagel in #2027
• Improve support for finding images that are used in operators with zarf prepare find-images by @mjnagel in #2027
• Automatically discover cosign signatures / attestations for discovered images in zarf prepare find-images by @mjnagel in #2027
• Introduce Agent TLS secret rolling with zarf tools update-creds agent by @Racer159 in #2065

Fixes

• Fix excessive CPU usage during zarf connect by @bdw617 in #2111
• Wait for the registry deployment to be fully ready instead of a single pod before continuing by @Racer159 in #2116
• Use Docker's transform library to ensure image refs are consistency parsed by @Noxsios in #2087
• Improve behavior around cluster connection during deploy by @Noxsios in #2088
• Fix package publishing an already signed package by @Racer159 in #2077

Rollup From v0.30 Patch Releases

• Properly allow namespaces to be empty when using zarf tools wait-for by @Racer159 in #2055
• Fix package metadata templating when using zarf package create with -o to an OCI remote by @corang in #2067
• Properly return a nil on error during a cluster creation call to prevent panics by @Racer159 in #2068
• Streamline the creation of packages by removing the max package size prompt by @Racer159 in #2071

Docs

• Fix typos on the GitHub action page and SBOM ADR by @testwill in #2084
• Document the use of the -count=1 flag to disable test caching by @lucasrod16 in #2082

Rollup From v0.30 Patch Releases

• Update warning to caution admonition within the Pepr Webhooks example by @Racer159 in #2053
• Improve documentation for package sources and for the use of --max-package-size by @Racer159 in #2071

Dependencies

• Update all non-major dependencies (including k3s to v1.28.2+k3s1) by @renovate in #2022
• Update github.com/anchore/stereoscope digest to 5909e35 by @renovate in #2107

Development

• Refactor Zarf component import composition to use a linked list by @Noxsios in #2058
• Fix numbers in package templates not templating correctly by @Racer159 in #2076
• Remove the Zarf Web UI and update references to point to the new repo by @Racer159 in #2079

Rollup From v0.30 Patch Releases

• Add the cleanup files action to the push stage of release workflow by @Racer159 in #2073

New Contributors

• @bdw617 made their first contribution in #2111
• @WeaponX314 made their first contribution in #2093
• @TristanHoladay made their first contribution in #2069
• @testwill made their first contribution in #2084

Full Changelog: v0.31.0-rc1...v0.31.0

v0.31.0-rc1

What's Changed

• feat: add --no-progress to wait-for sub command by @WeaponX314 in #2093
• feat: exposing gitea image vars for custom init pkg. by @TristanHoladay in #2069
• fix: use Docker's transform to ensure image refs are consistency parsed by @Noxsios in #2087
• fix: improve behavior around cluster connection during deploy by @Noxsios in #2088
• fix: package publishing an already signed package by @Racer159 in #2077
• fix(deps): update all non-major dependencies by @renovate in #2022
• docs: fix typos in documentation by @testwill in #2084
• docs: document the use of -count=1 flag to disable test caching by @lucasrod16 in #2082
• chore: fix numbers in package templates by @Racer159 in #2076
• chore: remove the Zarf Web UI and update references to the new repo by @Racer159 in #2079

New Contributors

• @WeaponX314 made their first contribution in #2093
• @TristanHoladay made their first contribution in #2069
• @testwill made their first contribution in #2084

Full Changelog: v0.30.1...v0.31.0-rc1

v0.30.1

What's Changed

Features

• Support mirroring non-image artifacts (i.e. Cosign signatures, OCI Helm Charts, etc) under the images key by @mjnagel in #2027
• Improve support for finding images that are used in operators with zarf prepare find-images by @mjnagel in #2027
• Automatically discover cosign signatures / attestations for discovered images in zarf prepare find-images by @mjnagel in #2027
• Introduce Agent TLS secret rolling with zarf tools update-creds agent by @Racer159 in #2065

Fixes

• Properly allow namespaces to be empty when using zarf tools wait-for by @Racer159 in #2055
• Fix package metadata templating when using zarf package create with -o to an OCI remote by @corang in #2067
• Properly return a nil on error during a cluster creation call to prevent panics by @Racer159 in #2068
• Streamline the creation of packages by removing the max package size prompt by @Racer159 in #2071

Docs

• Update warning to caution admonition within the Pepr Webhooks example by @Racer159 in #2053
• Improve documentation for package sources and for the use of --max-package-size by @Racer159 in #2071

Development

• Add the cleanup files action to the push stage of release workflow by @Racer159 in #2073

Full Changelog: v0.30.0...v0.30.1

v0.30.0

What's Changed

⚠️ Breaking Changes

• Due to the changes needed for image SHASUM parsing, newly built Zarf packages that contain images without a domain (i.e. from docker.io) will not work with older versions of Zarf (old packages are still forward compatible)
• There have been many under-the-hood changes for library users to implement package sources, layouts, command prefixes and more that will require changes to integrate with.

Deprecations

• Component Choice (the component group key) has been deprecated after gathering user feedback - it is recommended to migrate to composable components or another mechanism to build configurable packages.
• The Zarf Web UI has been deprecated within the Zarf binary itself (zarf dev ui) and will be moved to a new project Zarf UI. This will allow the UI to have it's own lifecycle / direction outside of Zarf core.

Features

• Initial implementation of regex pattern validation for variables by @Racer159 in #2016
• Allow SHASUM references to be parsed and present under images by @Racer159 in #2028
• [alpha] Add support for in-cluster package webhooks via Pepr by @YrrepNoj and @lucasrod16 in #1899

Rollup From v0.29 Patch Releases

• Introduce a zarf package mirror-resources command to pull resources from a package without initing or deploying by @Racer159 in #1913
• Introduce files.extractPath support to pull files directly from archives by @cmwylie19 in #1962
• Add extra environment variables and PVC enable variables to the Zarf Registry Chart by @AbrohamLincoln in #1994
• Include the helm repo / helm dependency commands in Zarf and tweak helm build logic by @Racer159 in #1991
• Implement chart/manifest merging by name within composable packages by @Racer159 in #1975

Fixes

• Fix idiosyncrasies with where certain package sources can be used by @Noxsios in #1977
• Adjust timeout messaging for actions to be more correct on timeout errors with 0 retries by @Racer159 in #2012
• Add a hint when a Helm Release might be empty when using the Big Bang extension by @dgershman in #2003
• Remove the image manifest check from find successors to better support other manifest types by @Racer159 in #2018
• Properly return an error after processing all charts if any of them failed during image discovery by @Racer159 in #2038
• Fix publish of component tarballs when directories are unarchived by @Noxsios in #2046
• Publish / pull user experience improvements and minor fixes by @Racer159 in #2047

Rollup From v0.29 Patch Releases

• Resolve edge cases with --tmpdir behavior not being followed correctly by @Racer159 in #2000
• Throw warning instead of error when last non-breaking version is checked with the default CLIVersion by @lucasrod16 in #1981
• Ensure that image manifests inside a Zarf package are pulled as blobs by @UncleGedd in #1987
• Copy global Kubernetes label variables to prevent leakage in library scenarios by @Racer159 in #1992
• Fix potential for double transform of image references (i.e with operators that self-reference) by @cmwylie19 in #1989

Documentation

• Update the bundle ADR to express its migration to uds-cli by @Racer159 in #2031
• Officially deprecate component group and add messaging to CLI + docs by @Racer159 in #2032
• Refine the documentation for Kubernetes manifests in Zarf by @Racer159 in #2039

Rollup From v0.29 Patch Releases

• Update the FAQ page with more content by @Madeline-UX in #2001
• Update the README with additional and more consistent content by @Madeline-UX in #2002

Dependencies

• Update github.com/anchore/stereoscope digest to bf05af5 by @renovate in #1986
• Update aws-actions/configure-aws-credentials action to v4 by @renovate in #2011
• Update actions/checkout action to v4 by @renovate in #2006
• Update docker/login-action action to v3 by @renovate in #2013
• Update all non-major dependencies by @renovate in #1961
• Update docker/setup-buildx-action action to v3 by @renovate in #2017
• Upgrade to cosign v2 and be more clear on the deprecation of sget:// by @Racer159 in #2023
• Update goreleaser/goreleaser-action action to v5 by @renovate in #2010
• Update sigstore/cosign-installer digest to c85d0e2 by @renovate in #1783

Development

• Refactor image pulling to use goroutines for concurrency by @corang in #1868
• Properly teardown the EKS cluster in the nightly workflow and update eksctl version by @lucasrod16 in #2014
• Update codeowners with recent team changes by @Racer159 in #2048
• Move the service find port function into library code by @Racer159 in #2049
• Decouple the agent image build process in Zarf-repository-specific Makefile by @dgershman in #2025
• Normalize Zarf command handling throughout Zarf by @Racer159 in #2050
• Add Zarf command prefix understanding to IsVendorCmd by @Racer159 in #2052
• Refactor and standardize the package loading process w/provider pattern by @Noxsios in #1977
• Mark the Zarf UI as [Deprecated] and update tunnel logic for library use by @Racer159 in #2042
• Cleanup files in release workflow to reduce disk pressure by @Racer159 in #2045

Rollup From v0.29 Patch Releases

• Update the EKS version to support Argo CD in nightly tests by @Racer159 in #1978
• Publish the Zarf init package + init skeleton as OCI on release by @Noxsios in #1990

Full Changelog: v0.30.0-rc2...v0.30.0

v0.30.0-rc2

What's Changed

• fix: publish not publishing component tarballs by @Noxsios in #2046
• fix: publish / pull UX improvement and minor fixes by @Racer159 in #2047
• chore: update codeowners by @Racer159 in #2048
• chore: move find port function into library code by @Racer159 in #2049
• chore(deps): update goreleaser/goreleaser-action action to v5 by @renovate in #2010
• chore(deps): update sigstore/cosign-installer digest to c85d0e2 by @renovate in #1783

Full Changelog: v0.30.0-rc1...v0.30.0-rc2

v0.30.0-rc1

Known Issues

• zarf init or zarf tools download-init pulling of the Zarf init package fails on this version - use the following curl command as a workaround (replacing amd64 with arm64 as required):

curl -L https://github.com/defenseunicorns/zarf/releases/download/v0.30.0-rc1/zarf-init-amd64-v0.30.0-rc1.tar.zst -O ~/.zarf-cache/zarf-init-amd64-v0.30.0-rc1.tar.zst

What's Changed

• feat: initial implementation of pattern by @Racer159 in #2016
• feat: allow shasums to be present in images by @Racer159 in #2028
• feat: in cluster package webhooks via Pepr (alpha) by @YrrepNoj in #1899
• fix: EKS cluster teardown in nightly workflow and update eksctl version by @lucasrod16 in #2014
• fix: adjust timeout messaging to be more correct on timeout errors with 0 retries by @Racer159 in #2012
• fix: adds a hint when the release might be empty by @dgershman in #2003
• fix: remove the image manifest check from find successors by @Racer159 in #2018
• fix: refactor image pulling to use goroutines for concurrency by @corang in #1868
• fix: return an error after processing all charts if any of them failed during image discovery by @Racer159 in #2038
• chore(deps): update github.com/anchore/stereoscope digest to bf05af5 by @renovate in #1986
• chore(deps): update aws-actions/configure-aws-credentials action to v4 by @renovate in #2011
• chore(deps): update actions/checkout action to v4 by @renovate in #2006
• chore(deps): update docker/login-action action to v3 by @renovate in #2013
• chore(deps): update all non-major dependencies by @renovate in #1961
• chore(deps): update docker/setup-buildx-action action to v3 by @renovate in #2017
• chore(deps): upgrade to cosign v2 and be more clear on the deprecation of sget:// by @Racer159 in #2023
• chore: update the bundle adr to express its migration to uds-cli by @Racer159 in #2031
• chore: officially deprecate component group and add messaging to CLI + docs by @Racer159 in #2032
• chore: refine the documentation for manifests by @Racer159 in #2039
• chore: refactor package loading process w provider pattern (the real MZAL) by @Noxsios in #1977
• chore: mark the Zarf UI as [Deprecated] and update tunnel logic for library use by @Racer159 in #2042
• chore: cleanup files in release workflow by @Racer159 in #2045

Full Changelog: v0.29.2...v0.30.0-rc1