zarf-dev/zarf v0.87.0-rc1 on GitHub

What's Changed

🚀 Updates

fix(helm): handle charts that render resources inside list kinds by @idebeijer in #5344
feat!: public operational type by @AustinAbro321 in #5345
feat: component sign and verify by @AustinAbro321 in #5358
chore: typo in README header from Packager to Package by @nick-adkins in #5389
refactor!: switch to api.Package from v1alpha1.ZarfPackage throughout repository by @AustinAbro321 in #5379
docs: fix tagline by @AustinAbro321 in #5392
feat: remove migrated fields on api.Package by @AustinAbro321 in #5390
fix(init): propagate secret updates on init mode changes by @brandtkeller in #5398
feat: add explicit git server mode to state by @AustinAbro321 in #5395
fix(create): run OnSuccess and OnFailure actions during create by @AustinAbro321 in #5406
feat(signing): unify signing option handling by @brandtkeller in #5385
feat(component): sign published manifests by @brandtkeller in #5386
feat(package)!: move signing out of publish by @brandtkeller in #5387
fix(assemble): cleanup temporary directory on error by @brandtkeller in #5407
docs: remove sbom viewer by @AustinAbro321 in #5409
feat!: migrate SignBlobOptions to a pointer by @brandtkeller in #5411
feat!: disable artifact server by default by @AustinAbro321 in #5417
feat(v1beta1): store multiple API versions in Deployed packages by @AustinAbro321 in #5250
feat(dev): add --components flag to dev inspect values-files by @dalehenries in #5413
fix: replace github.com/defenseunicorns/pkg with local versions by @soltysh in #5324
fix(helm)!: only label pod templates of built-in workload kinds by @idebeijer in #5360
fix!: remove images and repositories from package secret during connected deploys by @AustinAbro321 in #5402
feat: add validation for api package by @AustinAbro321 in #5393
fix(values): preserve inferred types across null overlays by @ntwkninja in #5412
feat(v1beta1): componet import validation by @AustinAbro321 in #5384

📦 Dependencies

chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5378
chore(deps): bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 by @dependabot[bot] in #5405
chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 by @dependabot[bot] in #5404
chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5403
chore(deps-dev): bump undici from 7.29.0 to 7.30.0 in /site by @dependabot[bot] in #5420

New Contributors

@idebeijer made their first contribution in #5344
@dalehenries made their first contribution in #5413

Full Changelog: v0.86.0...v0.87.0-rc1

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.87.0-rc1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.87.0-rc1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.87.0-rc1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.87.0-rc1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.