What's Changed
⚠️ Breaking Changes
- Signing Zarf packages is now done with
--signing-key
and--signing-key-pass
- the old--key
flag is deprecated onzarf package create
and has been removed fromzarf package publish
to support public keys instead - Component composability (
import.path
) must point to a directory, pointing to azarf.yaml
directly is no longer supported
NOTE: These are mostly edge cases on
zarf package create
and don't impactzarf package deploy
. If you are using either feature though ensure you update your package create process.
Features
- Introduce the
only.flavor
filter to allow building of package variants and provide a replacement for somegroup
use cases by @Racer159 in #2105 - Add
--no-progress
to thezarf tools wait-for
sub command by @WeaponX314 in #2093 - Expose Gitea image templates to custom init packages by @TristanHoladay in #2069
Rollup From v0.30 Patch Releases
- Support mirroring non-image artifacts (i.e. Cosign signatures, OCI Helm Charts, etc) under the
images
key by @mjnagel in #2027 - Improve support for finding images that are used in operators with
zarf prepare find-images
by @mjnagel in #2027 - Automatically discover cosign signatures / attestations for discovered images in
zarf prepare find-images
by @mjnagel in #2027 - Introduce Agent TLS secret rolling with
zarf tools update-creds agent
by @Racer159 in #2065
Fixes
- Fix excessive CPU usage during
zarf connect
by @bdw617 in #2111 - Wait for the registry deployment to be fully ready instead of a single pod before continuing by @Racer159 in #2116
- Use Docker's transform library to ensure image refs are consistency parsed by @Noxsios in #2087
- Improve behavior around cluster connection during deploy by @Noxsios in #2088
- Fix package publishing an already signed package by @Racer159 in #2077
Rollup From v0.30 Patch Releases
- Properly allow namespaces to be empty when using
zarf tools wait-for
by @Racer159 in #2055 - Fix package metadata templating when using
zarf package create
with-o
to an OCI remote by @corang in #2067 - Properly return a nil on error during a cluster creation call to prevent panics by @Racer159 in #2068
- Streamline the creation of packages by removing the max package size prompt by @Racer159 in #2071
Docs
- Fix typos on the GitHub action page and SBOM ADR by @testwill in #2084
- Document the use of the
-count=1
flag to disable test caching by @lucasrod16 in #2082
Rollup From v0.30 Patch Releases
- Update warning to caution admonition within the Pepr Webhooks example by @Racer159 in #2053
- Improve documentation for package sources and for the use of
--max-package-size
by @Racer159 in #2071
Dependencies
- Update all non-major dependencies (including
k3s
tov1.28.2+k3s1
) by @renovate in #2022 - Update github.com/anchore/stereoscope digest to 5909e35 by @renovate in #2107
Development
- Refactor Zarf component
import
composition to use a linked list by @Noxsios in #2058 - Fix numbers in package templates not templating correctly by @Racer159 in #2076
- Remove the Zarf Web UI and update references to point to the new repo by @Racer159 in #2079
Rollup From v0.30 Patch Releases
New Contributors
- @bdw617 made their first contribution in #2111
- @WeaponX314 made their first contribution in #2093
- @TristanHoladay made their first contribution in #2069
- @testwill made their first contribution in #2084
Full Changelog: v0.31.0-rc1...v0.31.0