zarf-dev/zarf v0.86.0-rc1

on GitHub

What's Changed

🚀 Updates

• feat: reject extra arguments to destroy by @jasonwashburn in #5311
• feat(cluster): support random registry pod selection by @brandtkeller in #5317
• chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 by @soltysh in #5322
• feat: migrate zarf tools registry ls from crane to oras-go by @abhishekgit03 in #5199
• feat: debug log container runtime for diagnostics - warn on cri-o by @brandtkeller in #5333
• fix: introduce more randomization in the fuzzers by @soltysh in #5275
• docs: fix typo in airgap git URL rewrite sentence by @ageisen2000 in #5342
• chore(ci): update brew name for zarf rc candidates by @brandtkeller in #5357
• fix: differing Windows files basenames on Linux and Windows by @Racer159 in #5359
• fix: interactive template prompts on create by @AustinAbro321 in #5362
• fix(values): infer integer and unknown schema types by @ntwkninja in #5334
• feat: support listing a deployed package by name by @acald-creator in #5310
• fix!: move sbom viewer behind disabled feature flag by @brandtkeller in #5368

📦 Dependencies

• chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @dependabot[bot] in #5306
• chore(deps): bump fast-uri from 3.1.5 to 3.1.7 in /site by @dependabot[bot] in #5307
• chore(deps): bump anchore/scan-action/download-grype from 7.4.0 to 7.4.2 by @dependabot[bot] in #5320
• chore(deps): bump github.com/anchore/syft from 1.51.0 to 1.51.1 by @dependabot[bot] in #5316
• chore(deps): bump the k8s group across 1 directory with 5 updates by @dependabot[bot] in #5308
• chore(deps): bump github.com/fluxcd/source-controller/api from 1.9.4 to 1.9.5 by @dependabot[bot] in #5323
• chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 in the golang group across 1 directory by @dependabot[bot] in #5326
• chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5319
• chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #5327
• chore(deps): bump github.com/moby/moby/client from 0.5.1 to 0.6.0 by @dependabot[bot] in #5341
• chore(deps): bump sharp from 0.35.3 to 0.35.4 in /site by @dependabot[bot] in #5329
• chore(deps): bump svgo from 4.0.2 to 4.1.0 in /site by @dependabot[bot] in #5328
• chore(deps): bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 by @dependabot[bot] in #5354
• chore(deps): bump nanoid from 3.3.16 to 3.3.19 in /site by @dependabot[bot] in #5355
• chore(deps): bump js-yaml from 4.3.1 to 4.3.2 in /site by @dependabot[bot] in #5331
• chore(deps): bump github.com/docker/cli from 29.7.2+incompatible to 29.8.0+incompatible by @dependabot[bot] in #5339
• chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 in the golang group across 1 directory by @dependabot[bot] in #5365
• chore(deps): bump github.com/google/go-containerregistry from 0.22.0 to 0.22.1 by @dependabot[bot] in #5340

New Contributors

• @ageisen2000 made their first contribution in #5342

Full Changelog: v0.85.0...v0.86.0-rc1

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.86.0-rc1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.86.0-rc1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.86.0-rc1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.86.0-rc1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.