v0.32.3

What's Changed

Fixes

• Properly handle panic that could occur during checksum validation by @mjnagel in #2262
• Add the --key flag to the init cmd to properly allow for signed init packages by @dgershman in #2259
• Restore destroy script functionality during zarf destroy by @Racer159 in #2274
• Fix symlink inclusion within component resources by @dgershman in #2256
• Use memory friendly file split logic for partial packages by @daniel-palmer-gu in #2264
• Fix reproducible tarball creation on Windows systems by @Noxsios in #2293

Docs

• Make branding more consistent and add community meetup references to docs by @Racer159 in #2258

Dependencies

• Update github.com/anchore/clio digest by @renovate in #2277 and #2283
• Update all non-major dependencies (including Gitea v1.21.5, Syft v0.100.0, K9s v0.31.7 and Crane v0.19.0) by @renovate in #2187

Development

• Add a more robust chart search regexManager by @Racer159 in #2278 and #2284
• Partial refactor of injector logic in k8s, and cluster packages by @chrishorton in #2271

New Contributors

• @daniel-palmer-gu made their first contribution in #2264

Full Changelog: v0.32.2...v0.32.3

v0.32.2

What's Changed

Features

• Support authenticated Helm repositories that have been configured with helm repo add by @AustinAbro321 in #2196
• Verify that the specified storage class exists during zarf init by @lucasrod16 in #2180
• Check for available node resources before building injector pod by @chrishorton in #2220
• Officially support yaml extensions within the zarf.yaml using x- keys by @AustinAbro321 in #2217

Fixes

• Fix the inclusion of helm sub commands when rendering zarf tools help by @jbrewer3 in #2216

Docs

• Fix typos in the extension README.md by @mjnagel in #2227
• Fix a small grammatical error in the base README.md by @cmwylie19 in #2219

Dependencies

• Update github.com/anchore/clio digest to 89e2fe8 by @renovate in #2214
• Update github.com/anchore/clio digest to a5e93b6 by @renovate in #2229
• Update github.com/anchore/stereoscope digest to eb656fc by @renovate in #2230

Development

• Remove workflow for automatically adding issues to the zarf project by @YrrepNoj in #2239
• Delete unnecessary waitgroup from concurrencyTools by @AustinAbro321 in #2244
• Update NewOrasRemote to take ocispec.Platform as an argument by @decleaver in #2241

New Contributors

• @jbrewer3 made their first contribution in #2216
• @chrishorton made their first contribution in #2220

Full Changelog: v0.32.1...v0.32.2

v0.32.1

What's Changed

Fixes

• ResolveRoot now properly returns an error when a target platform is not provided when used as a library by @Noxsios in #2212
• Fix reproducibility of internal tarballs for components + sboms to allow better OCI layer reuse by @Noxsios in #2210

Docs

• Remove dos-games skeleton references and instead use the skeleton architecture index by @Noxsios in #2208

Dependencies

• [security] Update github.com/go-git/go-git/v5 to v5.11.0 by @renovate in #2209
• [security] Update github.com/containerd/containerd to v1.7.11 by @renovate in #2209
• Update github.com/anchore/syft to v0.99.0 by @renovate in #2185
• Update github.com/anchore/clio digest to 3e50431 by @renovate in #2207
• Update github.com/anchore/stereoscope digest to 590920d by @renovate in #2206
• Update github/codeql-action action to v3 by @renovate in #2191

Full Changelog: v0.32.0...v0.32.1

v0.32.0

What's Changed

⚠️ Breaking Changes

• Gitea has been updated from the 8.x series chart (app version 1.19.3) to the 10.x series chart (app version 1.21.2) - this update contains breaking changes and should be tested if you are using this component - default Zarf installs will upgrade automatically but more advanced configurations / use cases should be reviewed. Gitea Release Notes
• Zarf package OCI references now use OCI indexes / platforms to handle architecture - packages published to OCI with this version of Zarf will be placed within an index and won't be able to be pulled with older versions - old packages will still be able to be pulled however.
• Component and package names can no longer start with a leading - as this is used within the deselect syntax introduced for --components

Features

    

• Add zarf dev deploy for quickly testing packages and restructure zarf prepare into zarf dev by @Noxsios in #2170
• Introduce unpinned resources (images/repos/files) warning for zarf dev lint by @AustinAbro321 in #2171
• Add glob selection and deselection support to --components by @Racer159 in #2175
• Switch to indexed platforms for OCI architectures (eliminate -amd64, -arm64 tag mangling) by @Noxsios in #2184

Rollup From v0.31 Patch Releases

• Introduce zarf prepare lint to perform schema validation and lay groundwork for standardizing best practices by @AustinAbro321 in #2075
• Add zarf package remove/inspect completion for package names from cluster sources by @WeaponX314 in #2151
• Add a warning when no components are selected for deployment in a package by @bdw617 in #2167
• Allow passing additional arguments to k9s when invoked by zarf tools monitor by @WeaponX314 in #2095
• Add REGISTRY_CA_BUNDLE variable to registry package and chart to improve S3 backed registries by @AbrohamLincoln in #2008
• Add GIT_SERVER_DISABLE_REGISTRATION variable to allow for Gitea registration, so that SSO can be used by @dgershman in #2118
• [Library Only] Initial implementation of Helm Chart overrides at deploy time by @Racer159 in #2131

Fixes

• Update error message when the image doesn't exist locally or on a remote by @bdw617 in #2160
• Corrected k8s / helm k8s client version within Helm templating by @AustinAbro321 in #2197
• Properly handle tunnel error channels to force retries of image pushing by @Racer159 in #2190

Rollup From v0.31 Patch Releases

• Fix helm chart clobbering and differences with Zarf and Helm chart names along with new repoName key by @Racer159 in #2174
• Add message asking if the user has init'ed their cluster and slim down error messages more generally by @AustinAbro321 in #2177
• Fix compose dropping the only.localOS filter from the composed package by @Racer159 in #2173
• Improve Helm rollback logic, messaging, and support for local tarballs by @Racer159 in #2157
• Add warnings to better log the errors encountered on image push retries by @Racer159 in #2147
• Make set -e (and $ErrorActionPreference = 'Stop';) the default for multiline actions so that they fail correctly by @UncleGedd in #2148
• Properly handle variable and constant merging when using composable components by @Racer159 in #2129
• Use the node name instead of the hostname label to build the injector pod by @Racer159 in #2119
• Resolve pathing issues while loading images with Zarf on Windows by @Racer159 in #2106
• Add an error channel for progress bar rendering to properly stop the progress bar when used as a library by @UncleGedd in #2117
• Keep a useable empty dir volume within the registry even when persistence is disabled by @Racer159 in #2124

Docs

Rollup From v0.31 Patch Releases

• Update the Airgap Software Delivery course name by @AustinAbro321 in #2172
• Promote the Quick Start section to Getting Started by @Racer159 in #2182
• Fix link and content issues across the docs by @AustinAbro321 in #2168
• Improve the docs for zarf tools k9s options and other command examples by @Racer159 in #2132
• Update the Zarf overview to be more clear about how Zarf works by @Racer159 in #2122

Dependencies

• Update gitea chart from 8.3.0 to 10.0.0 by @TristanHoladay in #2123
• Update module golang.org/x/crypto to v0.17.0 [security] by @renovate in #2201
• Update sigstore/cosign-installer action to v3 by @renovate in #1400
• Update github.com/anchore/stereoscope digest to 4b999b7 by @renovate in #2198
• Update dependency pepr to v20 by @renovate in #2193
• Update actions/download-artifact action to v4 by @renovate in #2194

Rollup From v0.31 Patch Releases

• Update actions/setup-go action to v5 by @renovate in #2179
• Update all non-major dependencies by @renovate in #2099
• Update github.com/anchore/clio digest to 767f622 by @renovate in #2186
• Update component-webhooks example to use new Pepr k8s fluent client by @lucasrod16 in #2090
• Update k8s.io/utils digest to cf03d44 then to b307cd5 by @renovate in #2156 and #2161
• Update github.com/anchore/stereoscope digest to 3610f4e by @renovate in #2155
• [security] Update module github.com/sigstore/cosign/v2 to v2.2.1 by @renovate in #2134

Development

• Update the release workflow to accept sigstore terms and sign by digest by @Racer159 in #2204 and #2205
• Update references to new ironbank credentials in bigbang workflow by @lucasrod16 in #2192

Rollup From v0.31 Patch Releases

• Move the cluster library from internal to pkg to make it available to consumers by @Noxsios in #2162
• Promote @lucasrod16 to be a full maintainer by @Racer159 in #2166
• Fix race condition in TestValidateLastNonBreakingVersion unit test by @lucasrod16 in #2138
• Split up the e2e tests that need a cluster, versus ones that do not to speed up CI by @bdw617 in #2139
• Update external tests to run in a unique k3d cluster and use the same Gitea chart as Zarf by @bdw617 in #2145

Full Changelog: v0.31.4...v0.32.0

v0.32.0-rc1

What's Changed

• feat: add zarf dev deploy for quickly testing packages and restructure zarf prepare by @Noxsios in #2170
• fix: update error message when the image doesn't exist locally or on a remote by @bdw617 in #2160
• fix: updated k8s / helm k8s version by @AustinAbro321 in #2197
• fix: properly handle the tunnel error channel to retry image pushing by @Racer159 in #2190
• chore(deps): update github.com/anchore/stereoscope digest to 4b999b7 by @renovate in #2198
• chore(deps): update dependency pepr to v20 by @renovate in #2193
• chore(deps): update actions/download-artifact action to v4 by @renovate in #2194
• chore: update references to new ironbank credentials in bigbang workflow by @lucasrod16 in #2192

Full Changelog: v0.31.4...v0.32.0-rc1

v0.31.4

What's Changed

Fixes

• Fix helm chart clobbering and differences with Zarf and Helm chart names along with new repoName key by @Racer159 in #2174
• Add message asking if the user has init'ed their cluster and slim down error messages more generally by @AustinAbro321 in #2177
• Fix compose dropping the only.localOS filter from the composed package by @Racer159 in #2173

Docs

• Update the Airgap Software Delivery course name by @AustinAbro321 in #2172
• Promote the Quick Start section to Getting Started by @Racer159 in #2182

Deps

• Update actions/setup-go action to v5 by @renovate in #2179
• Update all non-major dependencies by @renovate in #2099
• Update github.com/anchore/clio digest to 767f622 by @renovate in #2186

Full Changelog: v0.31.3...v0.31.4

v0.31.3

What's Changed

Features

• Introduce zarf prepare lint to perform schema validation and lay groundwork for standardizing best practices by @AustinAbro321 in #2075
• Add zarf package remove/inspect completion for package names from cluster sources by @WeaponX314 in #2151
• Add a warning when no components are selected for deployment in a package by @bdw617 in #2167

Fixes

• Improve Helm rollback logic, messaging, and support for local tarballs by @Racer159 in #2157

Docs

• Fix link and content issues across the docs by @AustinAbro321 in #2168

Dependencies

• Update component-webhooks example to use new Pepr k8s fluent client by @lucasrod16 in #2090
• Update k8s.io/utils digest to cf03d44 then to b307cd5 by @renovate in #2156 and #2161
• Update github.com/anchore/stereoscope digest to 3610f4e by @renovate in #2155

Development

• Move the cluster library from internal to pkg to make it available to consumers by @Noxsios in #2162
• Promote @lucasrod16 to be a full maintainer by @Racer159 in #2166

Full Changelog: v0.31.2...v0.31.3

v0.31.2

What's Changed

Fixes

• Add warnings to better log the errors encountered on image push retries by @Racer159 in #2147
• Make set -e (and $ErrorActionPreference = 'Stop';) the default for multiline actions so that they fail correctly by @UncleGedd in #2148

Docs

• Improve the docs for zarf tools k9s options and other command examples by @Racer159 in #2132

Dependencies

• [security] Update module github.com/sigstore/cosign/v2 to v2.2.1 by @renovate in #2134

Development

• Fix race condition in TestValidateLastNonBreakingVersion unit test by @lucasrod16 in #2138
• Split up the e2e tests that need a cluster, versus ones that do not to speed up CI by @bdw617 in #2139
• Update external tests to run in a unique k3d cluster and use the same Gitea chart as Zarf by @bdw617 in #2145

Full Changelog: v0.31.1...v0.31.2

v0.31.1

What's Changed

Features

• Allow passing additional arguments to k9s when invoked by zarf tools monitor by @WeaponX314 in #2095
• Add REGISTRY_CA_BUNDLE variable to registry package and chart to improve S3 backed registries by @AbrohamLincoln in #2008
• Add GIT_SERVER_DISABLE_REGISTRATION variable to allow for Gitea registration, so that SSO can be used by @dgershman in #2118
• [Library Only] Initial implementation of Helm Chart overrides at deploy time by @Racer159 in #2131

Fixes

• Properly handle variable and constant merging when using composable components by @Racer159 in #2129
• Use the node name instead of the hostname label to build the injector pod by @Racer159 in #2119
• Resolve pathing issues while loading images with Zarf on Windows by @Racer159 in #2106
• Add an error channel for progress bar rendering to properly stop the progress bar when used as a library by @UncleGedd in #2117
• Keep a useable empty dir volume within the registry even when persistence is disabled by @Racer159 in #2124

Docs

• Update the Zarf overview to be more clear about how Zarf works by @Racer159 in #2122

Full Changelog: v0.31.0...v0.31.1

v0.31.0

What's Changed

⚠️ Breaking Changes

• Signing Zarf packages is now done with --signing-key and --signing-key-pass - the old --key flag is deprecated on zarf package create and has been removed from zarf package publish to support public keys instead
• Component composability (import.path) must point to a directory, pointing to a zarf.yaml directly is no longer supported

NOTE: These are mostly edge cases on zarf package create and don't impact zarf package deploy. If you are using either feature though ensure you update your package create process.

Features

• Introduce the only.flavor filter to allow building of package variants and provide a replacement for some group use cases by @Racer159 in #2105
• Add --no-progress to the zarf tools wait-for sub command by @WeaponX314 in #2093
• Expose Gitea image templates to custom init packages by @TristanHoladay in #2069

Rollup From v0.30 Patch Releases

• Support mirroring non-image artifacts (i.e. Cosign signatures, OCI Helm Charts, etc) under the images key by @mjnagel in #2027
• Improve support for finding images that are used in operators with zarf prepare find-images by @mjnagel in #2027
• Automatically discover cosign signatures / attestations for discovered images in zarf prepare find-images by @mjnagel in #2027
• Introduce Agent TLS secret rolling with zarf tools update-creds agent by @Racer159 in #2065

Fixes

• Fix excessive CPU usage during zarf connect by @bdw617 in #2111
• Wait for the registry deployment to be fully ready instead of a single pod before continuing by @Racer159 in #2116
• Use Docker's transform library to ensure image refs are consistency parsed by @Noxsios in #2087
• Improve behavior around cluster connection during deploy by @Noxsios in #2088
• Fix package publishing an already signed package by @Racer159 in #2077

Rollup From v0.30 Patch Releases

• Properly allow namespaces to be empty when using zarf tools wait-for by @Racer159 in #2055
• Fix package metadata templating when using zarf package create with -o to an OCI remote by @corang in #2067
• Properly return a nil on error during a cluster creation call to prevent panics by @Racer159 in #2068
• Streamline the creation of packages by removing the max package size prompt by @Racer159 in #2071

Docs

• Fix typos on the GitHub action page and SBOM ADR by @testwill in #2084
• Document the use of the -count=1 flag to disable test caching by @lucasrod16 in #2082

Rollup From v0.30 Patch Releases

• Update warning to caution admonition within the Pepr Webhooks example by @Racer159 in #2053
• Improve documentation for package sources and for the use of --max-package-size by @Racer159 in #2071

Dependencies

• Update all non-major dependencies (including k3s to v1.28.2+k3s1) by @renovate in #2022
• Update github.com/anchore/stereoscope digest to 5909e35 by @renovate in #2107

Development

• Refactor Zarf component import composition to use a linked list by @Noxsios in #2058
• Fix numbers in package templates not templating correctly by @Racer159 in #2076
• Remove the Zarf Web UI and update references to point to the new repo by @Racer159 in #2079

Rollup From v0.30 Patch Releases

• Add the cleanup files action to the push stage of release workflow by @Racer159 in #2073

New Contributors

• @bdw617 made their first contribution in #2111
• @WeaponX314 made their first contribution in #2093
• @TristanHoladay made their first contribution in #2069
• @testwill made their first contribution in #2084

Full Changelog: v0.31.0-rc1...v0.31.0