What's Changed
🚀 Updates
- fix: print a valid skeleton import example from the CLI by @idebeijer in #5530
- feat: dev sha256sum not working with
extract-pathflag by @a1994sc in #5160 - feat(dev): add --confirm flag to patch-git by @shreyaabaranwal in #5531
- feat!: delete artifact server by @AustinAbro321 in #5561
- chore: release please v1 configuration by @brandtkeller in #5571
- feat!: remove sbom viewer by @AustinAbro321 in #5563
- refactor!: replace global architecture state with per-operation options by @jasonwashburn in #5498
- feat!: remove deprecated commands and flags by @AustinAbro321 in #5605
- feat(oci): added chuncked retryable resumable blob pulls by @sgettys in #5597
- feat!: remove zarf tools registry export by @AustinAbro321 in #5562
- feat!: remove daemon pull through crane by @AustinAbro321 in #5568
- feat!: error when variables are used with v1beta1 by @AustinAbro321 in #5606
- fix: deep copy values on merge so a chart mapping can't leak into later components by @a1994sc in #5585
- feat!: state enhancement updates by @brandtkeller in #5525
- feat!: removed deprecated k8s api migration by @AustinAbro321 in #5613
- feat!: default to v1beta1 init package by @AustinAbro321 in #5598
- chore(deps): bump site dependencies CVEs by @dwertent in #5602
- chore(deps): update github.com/andybalholm/brotli from v1.2.0 to v1.2.8 by @dwertent in #5620
- feat!: compress Zarf state by @AustinAbro321 in #5619
- feat!: error when package secret write fails by @AustinAbro321 in #5621
- feat!: removed deprecated SDK fields and bridges by @AustinAbro321 in #5615
- feat: deprecate v1alpha1 packages by @AustinAbro321 in #5623
- chore(deps): update github.com/klauspost/compress from v1.19.2 to v1.20.3 by @dwertent in #5629
- feat!: limit v1beta1 init package values chart inputs by @AustinAbro321 in #5631
- feat(state)!: remove storageclass and distro by @brandtkeller in #5624
- chore(docs): fixed broken links by @dwertent in #5601
- docs: v1.0 announcement page by @AustinAbro321 in #5569
- chore: document deprecation policy and update security.md by @brandtkeller in #5604
- chore: enable posthog metrics on docsite by @jonnyborbs in #5529
- docs: updated examples and reference guide to v1beta1 by @AustinAbro321 in #5635
📦 Dependencies
- chore(deps): bump github.com/distribution/distribution/v3 from 3.1.1 to 3.1.2 by @dependabot[bot] in #5469
- chore(deps): bump github.com/fluxcd/source-controller/api from 1.9.5 to 1.9.6 by @dependabot[bot] in #5468
- chore(deps): bump zod from 4.6.2 to 4.6.7 in /site by @dependabot[bot] in #5537
- chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in /site by @dependabot[bot] in #5536
- chore(deps): bump k8s.io/streaming from 0.37.1 to 0.37.2 in the k8s group across 1 directory by @dependabot[bot] in #5586
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5578
- chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #5579
- chore(deps): bump github.com/docker/cli from 29.8.2+incompatible to 29.9.2+incompatible by @dependabot[bot] in #5595
- chore(deps): bump the k8s group across 1 directory with 6 updates by @dependabot[bot] in #5611
New Contributors
- @shreyaabaranwal made their first contribution in #5531
- @dwertent made their first contribution in #5602
Full Changelog: v0.89.0...v1.0.0-rc1
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v1.0.0-rc1.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v1.0.0-rc1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"arm64:
zarf package verify zarf-init-arm64-v1.0.0-rc1.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v1.0.0-rc1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"See RELEASES.md for details.