Update dependency defenseunicorns/zarf to v0.49.0

[renovate]

This PR contains the following updates:

Package	Update	Change
defenseunicorns/zarf	minor	v0.30.0 -> v0.49.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

defenseunicorns/zarf (defenseunicorns/zarf)

v0.49.0

Compare Source

This release includes a number of project adjustments as well as fixes.

Breaking Changes

• Configuration file formats other than yaml and toml are being deprecated
  • See Proposed ZEP-0015 for background on limitations driving this decision
• zarf connect default execution has a UX change
  • The --cli-only flag has been removed - this behavior is now the default
  • Browsers can be automatically opened with the command using the --open flag

The update to zarf connect is with consideration of zarf behaviors defaulting to fully-encapsulated execution. As a general principle we want zarf to have minimal dependency on external/system tooling by default.

What's Changed

🚀 Updates

• fix: pass insecure flag option to FindChartInAuthAndTLSRepoURL by @​willswire in https://github.com/zarf-dev/zarf/pull/3477
• feat: improve skeleton package messaging by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3482
• fix: injector build process by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3479
• feat(connect): update default behavior to be cli-only by @​brandtkeller in https://github.com/zarf-dev/zarf/pull/3487
• chore(release): install cross before injector build by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3493
• fix: pulling not respecting "uncompressed" setting in metadata by @​a1994sc in https://github.com/zarf-dev/zarf/pull/3472
• chore(docs): update meetups issue reference by @​brandtkeller in https://github.com/zarf-dev/zarf/pull/3502
• test: remove dependency on make build-examples in e2e tests by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3494
• fix: add check during image discovery to make sure images are valid by @​a1994sc in https://github.com/zarf-dev/zarf/pull/3234
• Update TSC in CONTRIBUTING.md by @​mkcp in https://github.com/zarf-dev/zarf/pull/3496
• feat: deprecate config file types other than yaml and toml by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3517

📦 Dependencies

• chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3458
• chore(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3484
• chore(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 in the golang group across 1 directory by @​dependabot in https://github.com/zarf-dev/zarf/pull/3485
• chore(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3483
• chore(deps): bump github.com/goccy/go-yaml from 1.15.17 to 1.15.19 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3486
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.3 to 4.1.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3488
• chore(deps): bump golangci/golangci-lint-action from 6.3.1 to 6.3.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3489
• chore(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3490
• chore(deps): bump github.com/goccy/go-yaml from 1.15.19 to 1.15.20 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3492
• chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-rc.2 to 3.0.0-rc.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3491
• chore(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3498
• chore(deps): bump the k8s group across 1 directory with 5 updates by @​dependabot in https://github.com/zarf-dev/zarf/pull/3503
• chore(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.4.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3506
• chore(deps): bump github.com/goccy/go-yaml from 1.15.20 to 1.15.22 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3497
• chore(deps): bump github.com/fluxcd/source-controller/api from 1.4.1 to 1.5.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3505
• chore(deps): bump the cosign-providers group across 1 directory with 3 updates by @​dependabot in https://github.com/zarf-dev/zarf/pull/3504
• chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3512
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.20.1 to 0.20.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3509
• chore(deps): bump github.com/goccy/go-yaml from 1.15.22 to 1.15.23 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3510
• chore(deps): bump github.com/derailed/k9s from 0.32.7 to 0.40.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3513
• chore(deps): bump actions/create-github-app-token from 1.11.3 to 1.11.5 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3507
• chore(deps): bump golangci/golangci-lint-action from 6.4.0 to 6.5.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3508

Full Changelog: zarf-dev/zarf@v0.48.1...v0.49.0

v0.48.1

Compare Source

What's Changed

🚀 Updates

• feat: error when building a package with zero components by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3403
• chore(deps): group golang dependencies in dependabot by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3471
• test: delete e2e test for examples/package-flavors by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3463
• fix: avoid error when building package importing skeleton with remote components by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3470
• fix: avoid incorrect cyclic error when two packages import each other on separate component chains by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3460

📦 Dependencies

• chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3450
• chore(deps): bump github/codeql-action from 3.28.6 to 3.28.8 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3451
• chore(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3456
• chore(deps): bump golang.org/x/term from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3465
• chore(deps): bump actions/create-github-app-token from 1.11.2 to 1.11.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3467
• chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3466
• chore(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3468
• chore(deps): bump github.com/goccy/go-yaml from 1.15.15 to 1.15.17 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3462

Full Changelog: zarf-dev/zarf@v0.48.0...v0.48.1

v0.48.0

Compare Source

What's Changed

🚀 Updates

• test: avoid flake in test external by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3432
• fix: avoid errors when --max-package-size differs between create runs by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3398
• fix: log correct size with units during image pull by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3440
• feat: introduce output format flag for zarf tools get-creds and zarf package list by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3415
• feat: deprecate and replace zarf package inspect with child commands zarf package inspect definition|sbom|images by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3416
• chore: separate code changes from dependency updates in release notes by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3445
• fix: avoid false positives in import cycle detection by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3449

📦 Dependencies

• chore(deps): bump codecov/codecov-action from 5.2.0 to 5.3.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3431
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.20.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3429
• chore(deps): bump github/codeql-action from 3.28.3 to 3.28.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3430
• chore(deps): bump codecov/codecov-action from 5.3.0 to 5.3.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3437
• chore(deps): bump github/codeql-action from 3.28.4 to 3.28.5 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3438
• chore(deps): bump actions/setup-node from 4.1.0 to 4.2.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3441
• chore(deps): bump github/codeql-action from 3.28.5 to 3.28.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3442
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.2 to 4.0.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3443
• chore(deps): bump github.com/agnivade/levenshtein from 1.2.0 to 1.2.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3447

Full Changelog: zarf-dev/zarf@v0.47.0...v0.48.0

v0.47.0

Compare Source

Highlights:

Breaking

• Zarf's Commands have been unexported in favor of cmd.NewZarfCommand() for users embedding Zarf in their CLI applications.

UX

• The logging overhaul is out of beta and now fully released. --log-format="legacy" will be available for at least the next two minor releases for a smooth upgrade path.
• zarf package create's build scroll has been simplified and Yaml inspection has been migrated to a first class command zarf dev inspect {definition} (dev inspect feature requests welcome!).

What's Changed

• chore(deps): bump the cosign-providers group across 1 directory with 4 updates by @​dependabot in https://github.com/zarf-dev/zarf/pull/3390
• chore(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3391
• chore(deps): bump github/codeql-action from 3.28.0 to 3.28.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3395
• chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3394
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.6 to 4.45.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3393
• refactor: normal creator by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3114
• fix: remove empty directory in package tars by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3396
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.18.0 to 0.19.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3405
• chore(deps): bump helm.sh/helm/v3 from 3.16.4 to 3.17.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3407
• chore(deps): bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3406
• chore(deps): bump the k8s group across 1 directory with 5 updates by @​dependabot in https://github.com/zarf-dev/zarf/pull/3409
• chore(deps): bump github.com/goccy/go-yaml from 1.15.13 to 1.15.14 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3410
• chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3412
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.4 to 0.20.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3411
• feat: respect user's docker context endpoint during image pull by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3401
• chore(deps): bump github.com/moby/moby from 27.4.1+incompatible to 27.5.0+incompatible by @​dependabot in https://github.com/zarf-dev/zarf/pull/3402
• chore(deps): bump github.com/goccy/go-yaml from 1.15.14 to 1.15.15 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3414
• chore(deps): bump github.com/anchore/stereoscope from 0.0.12 to 0.0.13 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3419
• chore(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3418
• chore(deps): bump github/codeql-action from 3.28.1 to 3.28.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3417
• feat: default to new logging format by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3397
• chore: unexport cmd functions besides NewZarfCommand by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3421
• chore(deps): bump github/codeql-action from 3.28.2 to 3.28.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3427
• chore(deps): bump github.com/docker/cli from 27.5.0+incompatible to 27.5.1+incompatible by @​dependabot in https://github.com/zarf-dev/zarf/pull/3425
• chore(deps): bump codecov/codecov-action from 5.1.2 to 5.2.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3426
• chore(deps): bump github.com/anchore/syft from 1.18.1 to 1.19.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3424
• feat: dev inspect definition by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3413
• chore(deps): bump github.com/moby/moby from 27.5.0+incompatible to 27.5.1+incompatible by @​dependabot in https://github.com/zarf-dev/zarf/pull/3423
• chore(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3422
• fix: transform set variables to uppercase in dev inspect definition by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3428

Full Changelog: zarf-dev/zarf@v0.46.0...v0.47.0

v0.46.0

Compare Source

What's Changed

• feat: print warnings before confirm with slogger by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3325
• chore(deps): bump github/codeql-action from 3.27.7 to 3.27.9 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3326
• chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.8.0 to 1.9.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3328
• chore(deps): bump github.com/goccy/go-yaml from 1.15.8 to 1.15.9 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3329
• chore(deps): bump the k8s group across 1 directory with 3 updates by @​dependabot in https://github.com/zarf-dev/zarf/pull/3330
• test: change e2e tests to use new log format by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3318
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.10 to 1.8.11 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3331
• chore(deps): bump github.com/goccy/go-yaml from 1.15.9 to 1.15.10 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3332
• test: move lint e2e test to unit test by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3334
• refactor: Create structs for each command to better isolate commands by @​soltysh in https://github.com/zarf-dev/zarf/pull/3322
• chore(deps): bump helm.sh/helm/v3 from 3.16.3 to 3.16.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3336
• chore(deps): bump github.com/anchore/syft from 1.18.0 to 1.18.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3337
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.10 to 1.8.11 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3333
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.10 to 1.8.11 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3344
• refactor: Create structs for each tools command to better isolate commands - cont'd by @​soltysh in https://github.com/zarf-dev/zarf/pull/3340
• chore(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3343
• fix: check public key for signed packages during zarf package pull by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3347
• fix: allow non-interactive package publish with signing key by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3348
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.10 to 1.8.11 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3345
• chore(deps): bump codecov/codecov-action from 5.1.1 to 5.1.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3350
• chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-beta.1 to 3.0.0-rc.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3353
• fix: include key in nightly e2e pull from ecr test by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3351
• chore(deps): bump github.com/moby/moby from 27.4.0+incompatible to 27.4.1+incompatible by @​dependabot in https://github.com/zarf-dev/zarf/pull/3355
• chore(deps): bump github.com/goccy/go-yaml from 1.15.10 to 1.15.11 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3354
• refactor: Create structs for each tools command to better isolate commands - cont'd by @​soltysh in https://github.com/zarf-dev/zarf/pull/3357
• chore(deps): bump github/codeql-action from 3.27.9 to 3.28.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3360
• chore(deps): bump actions/create-github-app-token from 1.11.0 to 1.11.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3359
• chore: group cosign providers dependabot updates by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3352
• chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3363
• chore(deps): bump github.com/goccy/go-yaml from 1.15.11 to 1.15.13 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3361
• chore(deps): bump github.com/fairwindsops/pluto/v5 from 5.20.3 to 5.21.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3369
• chore(deps): bump golang.org/x/term from 0.27.0 to 0.28.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3370
• docs: remove order and post hook templating by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3338
• chore(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3368
• chore(deps): bump astro from 4.16.10 to 4.16.18 in /site by @​dependabot in https://github.com/zarf-dev/zarf/pull/3371
• chore: update hack/schema go mod and add ci check by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3372
• chore(deps): bump nanoid from 3.3.7 to 3.3.8 in /site by @​dependabot in https://github.com/zarf-dev/zarf/pull/3373
• chore: add stalebot by @​schristoff in https://github.com/zarf-dev/zarf/pull/3375
• chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3379
• chore(deps): bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3377
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.3 to 0.19.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3385
• Add support for import chains in packager2 by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3381
• fix: print image list without package yaml when using --image-list flag with inspect by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3384
• chore: multi directory gomod dependabot by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3386
• Revert "chore: add stalebot" by @​schristoff in https://github.com/zarf-dev/zarf/pull/3383
• fix: properly delete invalid layers during image pull by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3358
• chore(deps): bump github.com/invopop/jsonschema from 0.12.0 to 0.13.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3378
• chore(deps): bump github.com/anchore/stereoscope from 0.0.11 to 0.0.12 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3388
• fix: avoid erroring when $HOME is not defined by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3389

Full Changelog: zarf-dev/zarf@v0.45.0...v0.46.0

v0.45.0

Compare Source

What's Changed

• docs: image crc32 hash mutation by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3295
• chore(deps): bump codecov/codecov-action from 5.0.7 to 5.1.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3298
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3300
• chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.6.1 to 1.7.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3299
• Fix API Version for Flux resource in docs by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3301
• chore(deps): bump github.com/goccy/go-yaml from 1.15.6 to 1.15.8 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3302
• fix: passing context into packager by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3303
• chore(deps): bump github.com/anchore/syft from 1.17.0 to 1.18.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3308
• chore(deps): bump github.com/moby/moby from 27.3.1+incompatible to 27.4.0+incompatible by @​dependabot in https://github.com/zarf-dev/zarf/pull/3309
• feat: apply --no-color to dev and console logging option, remove console-no-color by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3312
• chore(deps): bump github/codeql-action from 3.27.6 to 3.27.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3316
• chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.7.0 to 1.8.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3315
• fix: truncate agent pod annotation so scheduler doesn't fail when annoation limit is exceeded by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3314
• chore(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3320
• chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3323
• feat: add metadata.annotations to package schema by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3319

Full Changelog: zarf-dev/zarf@v0.44.0...v0.45.0

v0.44.0

Compare Source

What's Changed

• chore(deps): bump github/codeql-action from 3.27.3 to 3.27.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3246
• chore(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3245
• chore(deps): bump helm.sh/helm/v3 from 3.16.2 to 3.16.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3240
• chore: dos-games dockerhub image to ghcr by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3233
• chore: unhide log-format flag by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3251
• chore(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3258
• chore(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3256
• chore(deps): bump codecov/codecov-action from 5.0.2 to 5.0.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3257
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3247
• chore: add ADOPTERS.md by @​schristoff in https://github.com/zarf-dev/zarf/pull/3225
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3263
• Update Go to 1.23.3 by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3260
• chore: separate schema generation by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2886
• fix: maintain agent mutate even when already mutated by @​a1994sc in https://github.com/zarf-dev/zarf/pull/3166
• chore(deps): bump github.com/anchore/stereoscope from 0.0.6-0.20241101185849-cbd43fb4e5d3 to 0.0.9 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3264
• Set Helm max history to limit secret creation by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3249
• feat: add logger to packager.Publish by @​mkcp in https://github.com/zarf-dev/zarf/pull/3259
• feat: introduce slog for zarf tools by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3212
• chore(deps): bump github.com/derailed/k9s from 0.32.5 to 0.32.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3262
• feat: add the new logger through Zarf wherever it is missing by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3265
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3269
• chore(deps): bump k8s.io/kubectl from 0.31.2 to 0.31.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3268
• Refactor compose e2e test to not depend on CLI output by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3126
• chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3272
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3273
• chore(deps): bump github.com/anchore/syft from 1.16.0 to 1.17.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3271
• chore(deps): bump github.com/goccy/go-yaml from 1.13.0 to 1.15.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3279
• chore(deps): bump github.com/goccy/go-yaml from 1.15.3 to 1.15.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3280
• Group k8s dependabot dependency updates by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3274
• Refactor migrate deprecated by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3270
• chore(deps): bump github.com/goccy/go-yaml from 1.15.4 to 1.15.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3281
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3282
• chore(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3287
• Update CONTRIBUTING.md to reflect policies by @​schristoff in https://github.com/zarf-dev/zarf/pull/3288
• feat: allow init packages to be explicitly versioned by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3286
• chore(deps): bump golang.org/x/term from 0.26.0 to 0.27.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3292
• chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3291
• chore: remove deprecated get git password command by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3293
• feat: move console to default by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3294
• feat: render tables and yaml on stdout by @​mkcp in https://github.com/zarf-dev/zarf/pull/3226

Full Changelog: zarf-dev/zarf@v0.43.1...v0.44.0

v0.43.1

Compare Source

What's Changed

• fix: change agent to run as same user in dockerfile by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3243

Full Changelog: zarf-dev/zarf@v0.43.0...v0.43.1

v0.43.0

Compare Source

What's Changed

• feat: implement new logger for Zarf connect by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3208
• chore(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3218
• chore: true up logger comments and minor refactors by @​mkcp in https://github.com/zarf-dev/zarf/pull/3215
• chore(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3216
• chore(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3220
• chore: export setupMessage function by @​catsby in https://github.com/zarf-dev/zarf/pull/3221
• chore: fix lint by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3232
• chore(deps): bump github/codeql-action from 3.27.0 to 3.27.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3228
• fix(docs): replace it"s with it is by @​daveworth in https://github.com/zarf-dev/zarf/pull/3227
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3230
• chore(deps): bump github/codeql-action from 3.27.1 to 3.27.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3237

Full Changelog: zarf-dev/zarf@v0.42.2...v0.43.0

What's Changed

• feat: implement new logger for Zarf connect by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3208
• chore(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3218
• chore: true up logger comments and minor refactors by @​mkcp in https://github.com/zarf-dev/zarf/pull/3215
• chore(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3216
• chore(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3220
• chore: export setupMessage function by @​catsby in https://github.com/zarf-dev/zarf/pull/3221
• chore: fix lint by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3232
• chore(deps): bump github/codeql-action from 3.27.0 to 3.27.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3228
• fix(docs): replace it"s with it is by @​daveworth in https://github.com/zarf-dev/zarf/pull/3227
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3230
• chore(deps): bump github/codeql-action from 3.27.1 to 3.27.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3237

Full Changelog: zarf-dev/zarf@v0.42.2...v0.43.0

v0.42.2

Compare Source

What's Changed

• feat: send actions output to slogger by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3164
• chore: add logger package deploy by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3159
• chore(deps): bump github.com/anchore/syft from 1.14.2 to 1.15.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/3156
• feat: make zarf-agent pods comply with offical restricted pod security standard by @​Ansible-man in https://github.com/zarf-dev/zarf/pull/3036
• Refactor config e2e test to not depend on CLI output by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3173
• chore: make the nightly tests run only in zarf-dev/zarf by @​joonas in https://github.com/zarf-dev/zarf/pull/3174
• fear: allow versioning of init packages outside of binary version by @​a1994sc in https://github.com/zarf-dev/zarf/pull/3169
• chore: slog dev deploy by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3176
• chore: slogger for zarf dev generate by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3178
• chore: slogger for zarf init by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3168
• Refactor zoci push to support new package layout by @​phillebaba in https://github.com/zarf-dev/zarf/pull/3185
• refactor: debug template print by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3171
• feat: slogging in agent by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/3190
• chore: update feature_request.md by @​schristoff in https://github.com/zarf-dev/zarf/pull/3179
• Upgrading to k8s v1.29 for distro k3s package by @​dgershman in https://github.com/zarf-dev/zarf/pull/3186
• chore(deps): bump mermaid from 10.9.0 to 10.9.3 in /site by @​dependabot in https://github.com/zarf-dev/zarf/pull/3195
• refactor: server side appl

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.