zarf-dev/zarf v0.77.0

on GitHub

0.77.0 (2026-05-28)

⚠ BREAKING CHANGES

• signing: resolve auth flow for CI environments (#4939)
• allow pulling images by index sha (#4879)

Features

• allow pulling images by index sha (#4879) (945a26d)
• find-images: 4509 include archives in find image (#4551) (058754e)
• init: prefer injector image without imagePullSecrets (#4935) (e46fa25)
• release: signed init packages (#4934) (158acbc)
• sign: support for keyless signing and offline verification (#4891) (d0b8665)

Bug Fixes

• signing: resolve auth flow for CI environments (#4939) (bc60685)

Full Changelog: v0.77.0-rc1...v0.77.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.77.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.77.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.77.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.77.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.