v0.28.2

What's Changed

Features

• Add support for appending @ git refs to Helm chart git URLs by @cmwylie19 in #1892
• Add support for building chart sub-dependencies by @cmwylie19 in #1892
• Add jsonpath support to wait actions and zarf tools wait-for by @cmwylie19 in #1873
• Add support for named ports on Services in zarf connect by @cmwylie19 in #1894
• Enable more key managers for signing packages with cosign by @YrrepNoj in #1879

Fixes

• Properly catch user interrupts when using Zarf commands by @caesarshift in #1891
• Correctly create all namespaces when in YOLO mode by @YrrepNoj in #1878
• Only verify authentication to registry if creds exist and better handle registry scopes by @Noxsios in #1893

Dependencies

• Update github.com/anchore/stereoscope digest to cd49355 by @renovate in #1680
• Update aws-actions/configure-aws-credentials digest to 5fd3084 by @renovate in #1825
• Update module github.com/fluxcd/source-controller/api to v1 by @renovate in #1877

Development

• Reduce the size of the transform package for easier reuse as a library by @cmwylie19 in #1883
• Create Pending zarf bundle ADR to start work on multi-package orchestration by @Noxsios in #1820
• Create Pending Zarf hooks ADR to start work on handling environment prerequisites for components by @YrrepNoj in #1813
• Refactor large workflows into multiple jobs and fix the release workflow by @Racer159 in #1901, #1902, and #1903

New Contributors

• @caesarshift made their first contribution in #1891

Full Changelog: v0.28.1...v0.28.2

v0.28.1

What's Changed

Features

• Allow for zarf crane pulls and zarf crane pushes without an explicit tunnel or auth for internal registries by @dgershman in #1851
• Add only filter support and full init package support to zarf package remove by @Racer159 in #1855
• Add source file info to SBOM viewer to better track nested files and dataInjections by @Racer159 in #1865
• Add package version to the zarf package list output by @YrrepNoj in #1858

Fixes

• Fix inclusion of empty files on package creation by @YrrepNoj in #1860
• Fix inline-oci:// create + publish using --output on zarf package create by @Noxsios in #1857
• Better detection of when to create state in custom init packages without the zaf-seed-registry by @Racer159 in #1855

Docs

• Fix rendering of the local file and manifests examples by @Racer159 in #1874

Dependencies

• Update Terraform aws module in the variables example to v5 by @renovate in #1850
• Update svelte to v4 for deployment web UI by @renovate in #1840
• Update all non-major dependencies by @renovate in #1790

Full Changelog: v0.28.0...v0.28.1

v0.28.0

What's Changed

⚠️ Breaking Changes

• Update the default init package's k3s version to v1.27.2+k3s1 from v1.24.1+k3s1 by @renovate in #1709

This only impacts existing deployments using the k3s component from the default init package, and the deprecated APIs are outlined in the K8s Deprecated API Migration Guide. Chart manifests will need to be updated to support the new APIs and will need to be redeployed to the cluster ideally prior to upgrading k3s. Zarf-managed charts can detect deprecations and attempt migrations after a k3s update but any GitOps deployments will need to be updated manually (see the Helm mapkubeapis plugin if you need to do this after updating k3s)

Features

    

• Improve package confirmation UX and display currently set variables by @Racer159 / @Madeline-UX in #1682
• Improve error handling and log display during web UI deployments by @mike-winberry / @Madeline-UX in #1828
• Improve package selection UX for web UI package deployments by @mike-winberry / @Madeline-UX in #1687
• Add zarf tools crane root command flags (i.e. --platform and --insecure) by @Racer159 in #1848
• Add zarf tools crane ls command to view tags for a given image reference by @dgershman in #1835
• Add the ability to place files in the home directory with ~ in the target by @Racer159 in #1848

Rollup From v0.27 Patch Releases

• Add a package warnings section, unhide filtered components, and improve SBOM message user experience by @Racer159 in #1749
• Respect actions.defaults.MaxTotalSeconds within the Big Bang extension by @Noxsios in #1782

Fixes

• Fix git repository fallbacks for branch, tag, and full repository clones by @Racer159 in #1841
• Fix Pending pods causing the Zarf injection process to stall by @Racer159 in #1844
• Fix deploy page in web UI not properly handling fatal error responses by @mike-winberry in #1842

Rollup From v0.27 Patch Releases

• Correctly name the HelmRelease manifest file for the Big Bang extension by @mjnagel in #1748
• Fix filepaths not being allowed to be nonexistent during component compose by @Noxsios in #1758
• Fix Importing OCI skeleton components w/ no local resources by @Noxsios in #1774
• Fix Big Bang OCI compose and Big Bang --differential package creation by @Racer159 in #1762
• Fix htpasswd generation causing issues with external registry passwords longer than 72 bytes by @Racer159 in #1786

Docs

• Improve the component actions docs and examples (i.e. better explaining ./zarf) by @Racer159 in #1826
• Fix the component import examples not showing in docs by @Racer159 in #1843
• Update the Big Bang example to include a teardown script by @jacobbmay in #1817
• Fix dead README / CONTRIBUTING links by @Racer159 in #1800
• Add initial docs around alpha/beta/stable definitions and plans for General Availability (GA) by @Racer159 in #1812
• Update the Nerd Notes page to include more information about the Zarf Agent by @cmwylie19 in #1807
• Elaborate on each package's purpose in the packages/README.md file by @cmwylie19 in #1818

Rollup From v0.27 Patch Releases

• Improve package examples in Zarf documentation by @Noxsios in #1741
• Add a Zarf package create differential tutorial by @JasonvanBrackel in #1735
• Update the Zarf feature list and why to use Zarf by @Madeline-UX in #1769
• Remove untested / unused examples by @Noxsios in #1753

Dependencies

• Update all non-major dependencies by @renovate in #1709
• Update module github.com/moby/moby to v24 by @renovate in #1718
• Update aws-actions/configure-aws-credentials digest to 5727f24 by @renovate in #1761
• Update dependency prism-react-renderer to v2 by @renovate in #1643
• Removed unused direct dependencies for the web UI by @mike-winberry in #1822

Rollup From v0.27 Patch Releases

• Update dependency @fontsource/roboto to v5 by @renovate in #1738
• Update Gitea image to 1.19.3-rootless (with Gitea Helm Chart 8.3.0) by @renovate in #1505

Development

• Complete the Zarf General Availability ADR by @Racer159 in #1768
• Enhance backwards compatibility testing with more high-level Zarf primitives by @Racer159 in #1789
• Refactor / optimize internal OCI functions to enhance reuse by @Noxsios in #1764
• Reduce disk pressure in upgrade and release workflows by @Racer159 in #1847
• Fix Renovate ignoring the examples directory by @dgershman in #1836

Rollup From v0.27 Patch Releases

• Fix the nightly AWS EKS / ECR tests by @Racer159 in #1740
• Add GitHub URLs in zarf.yamls to the Renovate bot regex matcher by @Racer159 in #1755
• Properly remove files in parallel tests for component actions by @Racer159 in #1784
• Fix some issues with releases running out of space by @Racer159 in #1785

New Contributors

• @jacobbmay made their first contribution in #1817

Full Changelog: v0.27.1...v0.28.0

v0.27.1

What's Changed

Features

• Add a package warnings section, unhide filtered components, and improve SBOM message user experience by @Racer159 in #1749
• Respect actions.defaults.MaxTotalSeconds within the Big Bang extension by @Noxsios in #1782

Fixes

• Correctly name the HelmRelease manifest file for the Big Bang extension by @mjnagel in #1748
• Fix filepaths not being allowed to be nonexistent during component compose by @Noxsios in #1758
• Fix Importing OCI skeleton components w/ no local resources by @Noxsios in #1774
• Fix Big Bang OCI compose and Big Bang --differential package creation by @Racer159 in #1762
• Fix htpasswd generation causing issues with external registry passwords longer than 72 bytes by @Racer159 in #1786

Docs

• Improve package examples in Zarf documentation by @Noxsios in #1741
• Add a Zarf package create differential tutorial by @JasonvanBrackel in #1735
• Update the Zarf feature list and why to use Zarf by @Madeline-UX in #1769
• Remove untested / unused examples by @Noxsios in #1753

Dependencies

• Update dependency @fontsource/roboto to v5 by @renovate in #1738
• Update Gitea image to 1.19.3-rootless (with Gitea Helm Chart 8.3.0) by @renovate in #1505

Development

• Fix the nightly AWS EKS / ECR tests by @Racer159 in #1740
• Add GitHub URLs in zarf.yamls to the Renovate bot regex matcher by @Racer159 in #1755
• Properly remove files in parallel tests for component actions by @Racer159 in #1784
• Fix some issues with releases running out of space by @Racer159 in #1785

Full Changelog: v0.27.0...v0.27.1

v0.27.0

What's Changed

⚠️ Breaking Changes

• Internal package structure changes will require packages built with v0.27.0 to be deployed with v0.27.0 or higher by @Noxsios in #1469 and by @Racer159 #1696

  Previously built packages are still compatible with v0.27.0, only newly created packages will require the higher version

• Component import paths have been made relative to the child zarf.yaml for files, data injections and actions (similar to how charts was previously). These paths will need to be updated to be relative to the child instead of the parent.

Features

• Expand component composability to include OCI imports by @Noxsios in #1469
• Enable differential package creation to consider imported OCI component versions by @YrrepNoj in #1714
• Improve SBOM glob matching and add the ability to template folders of files in the files noun by @Racer159 in #1696
• Add an SBOM section to the deploy review page of the Web UI by @mike-winberry in #1713
• Add scheduling logic to consider node taints when choosing images for the Zarf injector by @ragingpastry in #1731

Rollup From v0.26 Patch Releases

• Big Bang support for YOLO mode by @willswire in #1681
• Add zarf tools download-init to more easily retrieve the init package from releases by @Racer159 in #1710
• Add --kube-version override to zarf prepare find-images by @brandtkeller in #1662
• Add Helm HIP 15 mage annotation discovery support in zarf prepare find-images by @Racer159 in #1708
• Expose registry PVC accessMode as a zarf init variable by @willswire in #1664
• Add the ability to zarf connect to services in the Web UI by @mike-winberry in #1638
• Add the ability to specify registry overrides on package create by @Racer159 in #1683
• Support for differential package creation by specifying a previously built package with the --differential flag on zarf package create by @YrrepNoj in #1650
• Allow remote manifests (both files and kustomizations) by @Noxsios in #1633
• Initial Big Bang 2.0 support by @dgershman in #1611
• Adopt pre-existing resources into Zarf-managed Helm Charts by @Racer159 in #1626
• Discover jobs/hooks in zarf prepare find-images and show diff for zarf prepare patch-git by @Racer159 in #1645

Fixes

• Fix inaccessible clusters in a ~/.kube/config causing a failure during the architecture check by @Racer159 in #1724
• Ensure variables are uppercase when specified with --set by @YrrepNoj in #1728
• Fix full-repo authenticated git clone "authentication required" failures by @Racer159 in #1727
• Improve crane image pushing to reduce likelihood of image push stalling by @Racer159 in #1721
• Save/update deployed package state per component to assist rollbacks by @YrrepNoj in #1736

Rollup From v0.26 Patch Releases

• Replace Zarf Logo in WebUI with an HQ version by @mike-winberry in #1700
• [SECURITY] Resolve areas where sensitive state was being stored in Zarf logs by @Racer159 in #1692
• Improve messaging when the package architecture doesn't match cluster architecture by @lucasrod16 in #1495
• Fix issues pulling packages from some unauthenticated OCI registries by @Noxsios in #1678
• Fix some failing Big Bang 2.0 deployments by @willswire in #1648

Docs

• Improve and add clarity to the Zarf Package Components page by @Noxsios in #1469

Rollup From v0.26 Patch Releases

• Capitalize WordPress in the docs correctly by @ottok in #1702
• Add Package SBOM page and include more info on the View SBOMs page by @Racer159 in #1688
• Correct docs sidebar order to match Information Architecture navigation by @Racer159 in #1705
• Add a Zarf resource adoption tutorial by @JasonvanBrackel in #1691
• Update the help text for the --storage-class flag of zarf init by @RothAndrew in #1719
• Expand on package create information and add a Package Create and a Customize 'init' Package tutorial by @Racer159 in #1679
• Fix docs links on the Zarf 'init' Package page by @Racer159 in #1674
• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639
• Update the Zarf package create, package deploy and retro arcade tutorials by @laurenmengert in #1601
• Update the OCI package publish tutorial by @JasonvanBrackel in #1517
• Update when to where in package deploy tutorial by @cmwylie19 in #1660
• Improve the init package page with more configuration and lifecycle information by @Racer159 in #1644
• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639
• Improved information architecture - renamed Developer Guide to Contribute to Zarf by @Jessy-Morris in #1634
• Added a helm with git example by @dgershman in #1596
• Updates made to the "Set Up and Install" page by @Jessy-Morris in #1597
• Introduce a docs page for the previous beta-release of the Zarf UI by @Madeline-UX in #1612

Dependencies

• Update google/go-containerregistry (crane) to v0.15.2 by @Racer159 in #1721

Rollup From v0.26 Patch Releases

• [SECURITY] Update library/registry to 2.8.2 and all other non-major dependencies by @renovate in #1646
• Change gitea to the rootless version to enable compatibility with EFS and enhance security by @corang in #1706
• Update aws-actions/configure-aws-credentials action to v2 by @renovate in #1673
• Update all non-major dependencies by @renovate in #1562

Development

Rollup From v0.26 Patch Releases

• Improve GitHub issue templates (now with gherkin!) by @Racer159 in #1689
• Make the release process cleanup more aggressive by @Racer159 in #1695, #1699 and #1701
• Add explicit permissions to each CI workflow by @Racer159 in #1668
• Pin CI action dependencies by @Racer159 in https://g...

v0.26.4

What's Changed

Features

• Big Bang support for YOLO mode by @willswire in #1681
• Add zarf tools download-init to more easily retrieve the init package from releases by @Racer159 in #1710
• Add --kube-version override to zarf prepare find-images by @brandtkeller in #1662
• Add Helm HIP 15 mage annotation discovery support in zarf prepare find-images by @Racer159 in #1708

Fixes

• Replace Zarf Logo in WebUI with an HQ version by @mike-winberry in #1700

Docs

• Capitalize WordPress in the docs correctly by @ottok in #1702
• Add Package SBOM page and include more info on the View SBOMs page by @Racer159 in #1688
• Correct docs sidebar order to match Information Architecture navigation by @Racer159 in #1705
• Add a Zarf resource adoption tutorial by @JasonvanBrackel in #1691
• Update the help text for the --storage-class flag of zarf init by @RothAndrew in #1719

Dependencies

• [SECURITY] Update library/registry to 2.8.2 and all other non-major dependencies by @renovate in #1646

⚠️ NOTE - You can use library/registry:2.8.2 on older versions of Zarf by following the Creating a Custom 'init' Package Tutorial

• Change gitea to the rootless version to enable compatibility with EFS and enhance security by @corang in #1706

New Contributors

• @ottok made their first contribution in #1702

Full Changelog: v0.26.3...v0.26.4

v0.26.3

What's Changed

Features

• Expose registry PVC accessMode as a zarf init variable by @willswire in #1664
• Add the ability to zarf connect to services in the Web UI by @mike-winberry in #1638
• Add the ability to specify registry overrides on package create by @Racer159 in #1683

Fixes

• [SECURITY] Resolve areas where sensitive state was being stored in Zarf logs by @Racer159 in #1692
• Improve messaging when the package architecture doesn't match cluster architecture by @lucasrod16 in #1495
• Fix issues pulling packages from some unauthenticated OCI registries by @Noxsios in #1678

Docs

• Expand on package create information and add a Package Create and a Customize 'init' Package tutorial by @Racer159 in #1679
• Fix docs links on the Zarf 'init' Package page by @Racer159 in #1674

Dependencies

• Update aws-actions/configure-aws-credentials action to v2 by @renovate in #1673

Development

• Improve GitHub issue templates (now with gherkin!) by @Racer159 in #1689
• Make the release process cleanup more aggressive by @Racer159 in #1695, #1699 and #1701

Full Changelog: v0.26.2...v0.26.3

v0.26.2

What's Changed

Features

• Support for differential package creation by specifying a previously built package with the --differential flag on zarf package create by @YrrepNoj in #1650

⚠️ NOTE - This currently will diff images and repos and is currently meant for development use cases. Production use is possible but we will be looking to add more user messaging and package state management in the future to reduce the potential for churn with many diffs.

• Allow remote manifests (both files and kustomizations) by @Noxsios in #1633

Docs

• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639
• Update the Zarf package create, package deploy and retro arcade tutorials by @laurenmengert in #1601
• Update the OCI package publish tutorial by @JasonvanBrackel in #1517
• Update when to where in package deploy tutorial by @cmwylie19 in #1660
• Improve the init package page with more configuration and lifecycle information by @Racer159 in #1644
• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639

Development

• Add explicit permissions to each CI workflow by @Racer159 in #1668
• Pin CI action dependencies by @Racer159 in #1669

New Contributors

• @cmwylie19 made their first contribution in #1660

Full Changelog: v0.26.1...v0.26.2

v0.26.1

What's Changed

Features

• Initial Big Bang 2.0 support by @dgershman in #1611
• Adopt pre-existing resources into Zarf-managed Helm Charts by @Racer159 in #1626
• Discover jobs/hooks in zarf prepare find-images and show diff for zarf prepare patch-git by @Racer159 in #1645

Fixes

• Fix some failing Big Bang 2.0 deployments by @willswire in #1648

Docs

• Improved information architecture - renamed Developer Guide to Contribute to Zarf by @Jessy-Morris in #1634
• Added a helm with git example by @dgershman in #1596
• Updates made to the "Set Up and Install" page by @Jessy-Morris in #1597
• Introduce a docs page for the previous beta-release of the Zarf UI by @Madeline-UX in #1612

Dependencies

• Update all non-major dependencies by @renovate in #1562

Development

• Added renovate support for Big Bang by @dgershman in #1585
• Fix the Big Bang tests to support upgrading v1 to v2 by @Racer159 in #1640
• Add permisssions to nightly workflow to request the OIDC JWT token by @YrrepNoj in #1627
• Update codeowners to drop non-active approvers and add @Noxsios in more places by @Racer159 in #1647

New Contributors

• @willswire made their first contribution in #1648

Full Changelog: v0.26.0...v0.26.1

v0.26.0

⚠️ Breaking changes

• Image CRCs are now appended to tags instead of repository names to better dedupe image layers on push by @Racer159 in #1590

  When upgrading you will need to reinitialize the cluster and redeploy image-containing packages to create the new image refs. (i.e. 127.0.0.1:31999/library/nginx-3793515731:1.23.3 becomes 127.0.0.1:31999/library/nginx:1.23.3-zarf-3793515731) - existing pods will continue to run but may need to pull the new images on failures

• Zarf also now officially requires Big Bang version 1.54.0 or greater in the Big Bang extension by @dgershman in #1559

Features

     

• [BETA] Zarf Web UI now supports the Package Deployment Lifecycle by @mike-winberry in #1522

  To launch the web UI, you can run zarf dev ui - we will be looking for feedback and volunteers to test this further soon

• [EXPERIMENTAL] Zarf Agent Proxy Mode for git repos and npm/pypi/generic package artifacts by @Racer159 in #809

  To learn more about this mode see: https://github.com/defenseunicorns/zarf-package-dev-dependencies

• Enable swapping the registry image (i.e. Iron Bank or Enterprise-provided images) for custom init packages by @Racer159 in #1579

• Allow shell preferences in Zarf actions and prefer cmd for dataInjections on Windows by @Racer159 in #1581

Rollup From v0.25 Patch Releases

• Added an optional Gitea Virtual Service to the Big Bang example by @dgershman in #1475
• Added the ability to merge valuesFiles with the BigBang extension through composability by @runyontr in #1477
• Normalize variables across functionality and introduce setVariables, autoIndent and sensitive keys by @Racer159 in #1474
• Introduce validation of package contents with checksums and verification with package signatures with --key by @YrrepNoj in #1467

Fixes

• Fixed an issue where specifying a custom repo for the Big Bang extension fails when getting flux by @dgershman in #1613
• Fixed an issue when unpacking sboms on zarf package inspect from some older Zarf packages by @Racer159 in #1621
• Fix internal registry HPA scaledown behavior, and improve registry push UX by @Racer159 in #1590
• Fix a failure when running zarf tools kubectl version by @Racer159 in #1620

Rollup From v0.25 Patch Releases

• Bump BB version by @runyontr in #1549
• Fix Big Bang helm release rendering on k8s < 1.25 by @runyontr in #1554
• Fix go-git operation logging by @Racer159 in #1555
• Fix zarf package remove always requiring a cluster by @Racer159 in #1556
• Add additional details for debugging registry pushes by @dgershman in #1558
• Update the Big Bang ingress certificates by @dgershman in #1471
• Update the calculation for the expected bytes during image layer pulls by @YrrepNoj in #1489
• Fix helm not rolling back properly when a malformed package is deployed by @Racer159 in #1480
• Fix the package deploy error message when package and cluster architectures don't match by @lucasrod16 in #1494
• Fix Openshift issues mounting directories in the agent pod, and remove incorrect values by @Racer159 in #1515
• Properly pass package architecture from metadata by @Racer159 in #1497
• Fix root command help printing by @Racer159 in #1524
• Fix issues with Windows dataInjections using sh instead of powershell by @Racer159 in #1520

Docs

• Docs updates to the "Understanding Zarf Packages" page by @Jessy-Morris in #1548
• Bump to Big Bang 1.57.1 in the Big Bang Example by @dgershman in #1569
• Docs updates to the "The Zarf init Package" page by @Jessy-Morris in #1574
• Fix README setup-zarf link and brew install commands on overview page by @atz in #1584
• Improve the key not provided message on package signing validation by @Racer159 in #1578
• Docs updates to the "Component Actions" page by @Jessy-Morris in #1587
• Docs updates to the "VS Code" page by @Jessy-Morris in #1589
• Add a style guide page and copy for docs contributors by @Jessy-Morris in #1586
• Update --confirm flag description for init and package deploy cmd by @Madeline-UX in #1602
• Docs updates to the "Code Testing" page by @Jessy-Morris in #1605

Rollup From v0.25 Patch Releases

• Docs edits for "Zarf Packages" page by @Jessy-Morris in #1544
• Initializing a Cluster and Creating a Cluster with Zarf walkthrough updates by @josiblair in #1531
• Update the deploy walkthrough to use ansi2html by @JasonvanBrackel in #1470
• Update logging walkthrough by @JasonvanBrackel in #1462
• Docs edits for "Understand the Basics" by @Jessy-Morris in #1485
• Update schema docs to include information about OCI registries for helm charts by @lucasrod16 in #1464
• Improve zarf init CLI examples by @dgershman in #1492
• Docs edits for "Overview" page by @Jessy-Morris in #1496
• Docs edits to "The Zarf CLI" page by @Jessy-Morris in #1519
• Docs edits to "Getting Started" page by @Jessy-Morris in #1508
• Docs edits to User Guide page by @Jessy-Morris in #1512
• Docs edits for "Building Your Own Zarf CLI" page by @Jessy-Morris in #1528
• Docs updates to "Common CLI Uses" page by @Jessy-Morris in #1533

Dependencies

• Update dependency @sveltejs/kit to 1.15.2 [security] by @renovate in #1576
• Update github.com/anchore/stereoscope diges...