zarf-dev/zarf v0.81.0

on GitHub

0.81.0 (2026-07-09)

⚠ BREAKING CHANGES

• ocischeme: support per-host transport negotiation for plain http (#5047)
• sign: remove legacy signature from production (#5030)
• sbom: remove compare tool (#5033)
• verification: behavior updates for verification logic (#5011)

Features

• add registry logout function (#4976) (c2ab144)
• cmd: add viper option for cache (#5051) (36fd721)
• deprecate artifact server (#5041) (642ac33)
• deprecate sbom viewer (#5046) (32e1479)
• deprecate: zarf tools registy export (#5031) (926c008)
• direct docker daemon pull (#5001) (97c2388)
• group verify flags in CLI help text (#5008) (20c32e8)
• lint: warn on images without a domain and archive images without .internal (#4983) (ed73631)
• ocischeme: support per-host transport negotiation for plain http (#5047) (7fc1dec)
• reduce docker daemon pull storage footprint (#5017) (f5a443d)
• sbom: remove compare tool (#5033) (8e4ee75)
• schema: update v1beta1 types (#4704) (edc9eb1)
• sign: remove legacy signature from production (#5030) (fab4f62)
• v1beta1: split target into create time selector and deploy time target (#5042) (d188f07)
• verification: behavior updates for verification logic (#5011) (5f3a0a9)

Bug Fixes

• flags: depecate --zarf-cache in favor of just --cache (#5032) (9da35b6)
• update oras-go and mitigate auto-unpack (#5049) (bc9818d)

What's Changed

🚀 Updates

• chore(main): release 0.81.0 by @zarf-release-please[bot] in #5009

Full Changelog: v0.81.0-rc1...v0.81.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.81.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.81.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.