github zarf-dev/zarf v0.83.0

3 hours ago

0.83.0 (2026-08-07)

⚠ BREAKING CHANGES

  • chart naming and expose other useful library functions (#5107)

Features

  • add option to skip values schema validation (#5179) (300af24)
  • deprecate yolo mode (#5180) (fe4cf8d)
  • find-images: exclude images from Helm tests (#5128) (bae3a8c)
  • init: more secure pod defaults (#5119) (0351733)
  • introduce conversions between API versions (#4823) (af9779e)
  • security: support project vulnerability scanning and VEX statements (#5029) (45ba4f1)
  • update-creds: separate commands for each service (#5106) (37e071f)

Bug Fixes

  • proper binary scan location for nightly cve scan (#5120) (10a199d)
  • state access in OnRemove actions (#5156) (8ea4a58)
  • verify: honor configured temp dir for embedded trusted root (#5144) (95dcdbe)
  • version aware topic assignments for hidden pages (#5108) (79c8ecf)

Refactoring

What's Changed

🚀 Updates

  • chore(main): release 0.83.0 by @zarf-release-please[bot] in #5112

Full Changelog: v0.83.0-rc2...v0.83.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.83.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.83.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

Don't miss a new zarf release

NewReleases is sending notifications on new releases.