zarf-dev/zarf v0.86.0

on GitHub

0.86.0 (2026-09-17)

⚠ BREAKING CHANGES

• move sbom viewer behind disabled feature flag (#5368)

Features

• cluster: support random registry pod selection (#5317) (fb3a53b)
• debug log container runtime for diagnostics - warn on cri-o (#5333) (4e34f0e)
• migrate zarf tools registry ls from crane to oras-go (#5199) (da37c2a)
• reject extra arguments to destroy (#5311) (2a03baf)
• support listing a deployed package by name (#5310) (5fda9ff)

Bug Fixes

• differing Windows files basenames on Linux and Windows (#5359) (22bbb45)
• interactive template prompts on create (#5362) (9545b01)
• introduce more randomization in the fuzzers (#5275) (46018cf)
• move sbom viewer behind disabled feature flag (#5368) (9a1699a)
• values: infer integer and unknown schema types (#5334) (221c4f6)

What's Changed

🚀 Updates

• chore(main): release 0.86.0 by @zarf-release-please[bot] in #5318

Full Changelog: v0.86.0-rc1...v0.86.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.86.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.86.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.86.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.86.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.