What's Changed
🚀 Updates
- fix: deprecated schema fields by @brandtkeller in #5195
- docs(examples): improve longhorn health checks and registry docs by @abhishekgit03 in #5175
- ci: switch from shallow checkout by @brandtkeller in #5198
- feat(v1beta1): load v1beta1 packages by @AustinAbro321 in #5048
- chore(deps): bump astro from 7.0.7 to 7.2.0 in /site by @soltysh in #5209
- feat: injector image flag by @AustinAbro321 in #5214
- feat: introduce zarf dev template by @AustinAbro321 in #5206
- feat(v1beta1)!: use package definition across public packager functionality by @AustinAbro321 in #5173
- chore: bump go version by @brandtkeller in #5229
- fix: add values flags to dev deploy and init by @AustinAbro321 in #5234
- test: add unit coverage for generated SBOM contents by @gangadhar-res in #5222
- fix: replace mimetype with archives by @brandtkeller in #5228
- refactor: move template out of internal by @a1994sc in #5212
- fix: negotiate oci scheme for allowing plain http oci endpoints by @brandtkeller in #5197
- feat: allow excluding ArgoCD and Flux resources from Zarf Agent mutation by @colinlodter in #5224
- feat(dev): evaluate helm chart schemas in dev generate-schema by @mjnagel in #5176
- chore: update mention of values to beta by @brandtkeller in #5246
- chore: update contributing ladder for approval guidance by @brandtkeller in #5245
- feat(agent): add variable for mutating webhook annotations by @AustinAbro321 in #5243
- fix: packager.Remove() uses ZarfDefaultTimeout as default timeout by @curtis-nichols in #5253
- chore: update and lint vex before release by @brandtkeller in #5251
- fix: registry mode not handled properly in update-creds by @Racer159 in #5230
📦 Dependencies
- chore(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.0+incompatible by @dependabot[bot] in #5185
- chore(deps): bump fast-uri from 3.1.4 to 3.1.5 in /site by @dependabot[bot] in #5171
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5200
- chore(deps): bump docker/login-action from 4.5.1 to 4.6.0 by @dependabot[bot] in #5201
- chore(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 by @dependabot[bot] in #5204
- chore(deps): bump github.com/sigstore/sigstore-go from 1.2.2 to 1.3.0 by @dependabot[bot] in #5186
- chore(deps): bump github.com/docker/cli from 29.7.0+incompatible to 29.7.1+incompatible in the docker group across 1 directory by @dependabot[bot] in #5203
- chore(deps): bump mermaid from 10.9.6 to 10.9.8 in /site by @dependabot[bot] in #5187
- chore(deps): bump postcss from 8.5.19 to 8.5.25 in /site by @dependabot[bot] in #5170
- chore(deps): bump js-yaml from 4.2.0 to 4.3.1 in /site by @dependabot[bot] in #5188
- chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /site by @dependabot[bot] in #5194
- chore(deps): bump the cosign-providers group across 1 directory with 4 updates by @dependabot[bot] in #5202
- chore(deps): bump github.com/docker/cli from 29.7.1+incompatible to 29.7.2+incompatible by @dependabot[bot] in #5215
- chore(deps): bump github.com/fairwindsops/pluto/v5 from 5.24.1 to 5.24.3 by @dependabot[bot] in #5221
- chore(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 by @dependabot[bot] in #5216
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5232
- chore(deps): bump github.com/fluxcd/source-controller/api from 1.9.3 to 1.9.4 by @dependabot[bot] in #5233
- chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #5237
- chore(deps): bump github.com/defenseunicorns/pkg/oci from 1.31.1 to 1.32.0 by @AustinAbro321 in #5239
- chore(deps): bump github.com/anchore/syft from 1.50.0 to 1.51.0 by @dependabot[bot] in #5236
- chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 in the golang group across 1 directory by @dependabot[bot] in #5248
New Contributors
- @abhishekgit03 made their first contribution in #5175
- @gangadhar-res made their first contribution in #5222
- @colinlodter made their first contribution in #5224
- @curtis-nichols made their first contribution in #5253
Full Changelog: v0.83.0...v0.84.0-rc1
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.84.0-rc1.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0-rc1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"arm64:
zarf package verify zarf-init-arm64-v0.84.0-rc1.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0-rc1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"See RELEASES.md for details.