What's Changed
🚀 Updates
- feat(lint): warn on images without a domain and archive images without .internal by @willswire in #4983
- feat: group verify flags in CLI help text by @AustinAbro321 in #5008
- ci: additional agent logs by @AustinAbro321 in #5006
- feat: direct docker daemon pull by @AustinAbro321 in #5001
- chore: fix error message typo in packager load identifySource by @jasonwashburn in #5018
- feat(verification)!: behavior updates for verification logic by @brandtkeller in #5011
- chore(deps): introduce 7 day cooldown period for dependabot by @soltysh in #5022
- chore(deps): bump syft to v1.46.0 by @brandtkeller in #5021
- feat(schema): update v1beta1 types by @AustinAbro321 in #4704
- feat: reduce docker daemon pull storage footprint by @AustinAbro321 in #5017
- feat(deprecate): zarf tools registy export by @AustinAbro321 in #5031
- feat(sbom)!: remove compare tool by @AustinAbro321 in #5033
- chore(deps): vendor dependencies by @soltysh in #4900
- fix(flags): depecate --zarf-cache in favor of just --cache by @soltysh in #5032
- ci: fix precommit linting of vendor directory by @brandtkeller in #5036
- feat: add registry logout function by @sepauli in #4976
- feat(sign)!: remove legacy signature from production by @brandtkeller in #5030
- chore(examples): refresh longhorn example to v1.11.2 by @acald-creator in #4923
- docs: update Azure KeyVault URL for package signing by @niklashempel in #5040
- feat: deprecate artifact server by @AustinAbro321 in #5041
- feat: deprecate sbom viewer by @AustinAbro321 in #5046
- feat(v1beta1): split target into create time selector and deploy time target by @AustinAbro321 in #5042
- docs(search): load pages from currently selected version by @AustinAbro321 in #5035
- chore: update go version by @brandtkeller in #5050
- feat(ocischeme)!: support per-host transport negotiation for plain http by @brandtkeller in #5047
- fix: update oras-go and mitigate auto-unpack by @brandtkeller in #5049
- feat(cmd): add viper option for cache by @AustinAbro321 in #5051
📦 Dependencies
- chore(deps): bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1 by @dependabot[bot] in #5015
- chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the actions-organization group by @dependabot[bot] in #5014
- chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @dependabot[bot] in #5038
New Contributors
- @acald-creator made their first contribution in #4923
- @niklashempel made their first contribution in #5040
Full Changelog: v0.80.0...v0.81.0-rc1
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.81.0-rc1.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0-rc1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"arm64:
zarf package verify zarf-init-arm64-v0.81.0-rc1.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0-rc1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"See RELEASES.md for details.