v0.30.0-rc1

Known Issues

• zarf init or zarf tools download-init pulling of the Zarf init package fails on this version - use the following curl command as a workaround (replacing amd64 with arm64 as required):

curl -L https://github.com/defenseunicorns/zarf/releases/download/v0.30.0-rc1/zarf-init-amd64-v0.30.0-rc1.tar.zst -O ~/.zarf-cache/zarf-init-amd64-v0.30.0-rc1.tar.zst

What's Changed

• feat: initial implementation of pattern by @Racer159 in #2016
• feat: allow shasums to be present in images by @Racer159 in #2028
• feat: in cluster package webhooks via Pepr (alpha) by @YrrepNoj in #1899
• fix: EKS cluster teardown in nightly workflow and update eksctl version by @lucasrod16 in #2014
• fix: adjust timeout messaging to be more correct on timeout errors with 0 retries by @Racer159 in #2012
• fix: adds a hint when the release might be empty by @dgershman in #2003
• fix: remove the image manifest check from find successors by @Racer159 in #2018
• fix: refactor image pulling to use goroutines for concurrency by @corang in #1868
• fix: return an error after processing all charts if any of them failed during image discovery by @Racer159 in #2038
• chore(deps): update github.com/anchore/stereoscope digest to bf05af5 by @renovate in #1986
• chore(deps): update aws-actions/configure-aws-credentials action to v4 by @renovate in #2011
• chore(deps): update actions/checkout action to v4 by @renovate in #2006
• chore(deps): update docker/login-action action to v3 by @renovate in #2013
• chore(deps): update all non-major dependencies by @renovate in #1961
• chore(deps): update docker/setup-buildx-action action to v3 by @renovate in #2017
• chore(deps): upgrade to cosign v2 and be more clear on the deprecation of sget:// by @Racer159 in #2023
• chore: update the bundle adr to express its migration to uds-cli by @Racer159 in #2031
• chore: officially deprecate component group and add messaging to CLI + docs by @Racer159 in #2032
• chore: refine the documentation for manifests by @Racer159 in #2039
• chore: refactor package loading process w provider pattern (the real MZAL) by @Noxsios in #1977
• chore: mark the Zarf UI as [Deprecated] and update tunnel logic for library use by @Racer159 in #2042
• chore: cleanup files in release workflow by @Racer159 in #2045

Full Changelog: v0.29.2...v0.30.0-rc1

v0.29.2

What's Changed

Features

• Introduce a zarf package mirror-resources command to pull resources from a package without initing or deploying by @Racer159 in #1913

⚠️ Note: This command currently only supports images and git repositories - Helm chart support requires OCI mirroring which is being workedin #2005

Fixes

• Resolve edge cases with --tmpdir behavior not being followed correctly by @Racer159 in #2000

Documentation

• Update the FAQ page with more content by @Madeline-UX in #2001
• Update the README with additional and more consistent content by @Madeline-UX in #2002

Full Changelog: v0.29.1...v0.29.2

v0.29.1

What's Changed

Features

• Introduce files.extractPath support to pull files directly from archives by @cmwylie19 in #1962
• Add extra environment variables and PVC enable variables to the Zarf Registry Chart by @AbrohamLincoln in #1994
• Include the helm repo / helm dependency commands in Zarf and tweak helm build logic by @Racer159 in #1991
• Implement chart/manifest merging by name within composable packages by @Racer159 in #1975

Fixes

• Throw warning instead of error when last non-breaking version is checked with the default CLIVersion by @lucasrod16 in #1981
• Ensure that image manifests inside a Zarf package are pulled as blobs by @UncleGedd in #1987
• Copy global Kubernetes label variables to prevent leakage in library scenarios by @Racer159 in #1992
• Fix potential for double transform of image references (i.e with operators that self-reference) by @cmwylie19 in #1989

Development

• Update the EKS version to support Argo CD in nightly tests by @Racer159 in #1978
• Publish the Zarf init package + init skeleton as OCI on release by @Noxsios in #1990

New Contributors

• @AbrohamLincoln made their first contribution in #1994

Full Changelog: v0.29.0...v0.29.1

v0.29.0

What's Changed

Features

    

• Add support for mutating repository information in ArgoCD Application CRDs and Repositories by @dgershman in #1875
• Introduce zarf tools update-creds to roll credentials for Zarf managed git, registry and artifact services by @Racer159 in #1898
• Introduce zarf tools registry prune to cleanup old images not referenced by currently deployed Zarf packages by @Racer159 in #1966
• Add the --no-color option to disable ANSI color code output by @caesarshift in #1889

Rollup From v0.28 Patch Releases

• Add Zarf Agent support for Prometheus Metrics by @cmwylie19 in #1915
• Support --output on zarf version to return more detailed version information by @Noxsios in #1916
• Introduce backwards compatibility validation on package deploy by @lucasrod16 in #1909
• Add a template for ###ZARF_COMPONENT_NAME### to be used during component import by @cmwylie19 in #1923
• Add additional flux patch override support to the Big Bang extension by @Racer159 in #1910
• Add the ability to specify Zarf variables as filepaths by @Racer159 in #1906
• Add support for appending @ git refs to Helm chart git URLs by @cmwylie19 in #1892
• Add support for building chart sub-dependencies by @cmwylie19 in #1892
• Add jsonpath support to wait actions and zarf tools wait-for by @cmwylie19 in #1873
• Add support for named ports on Services in zarf connect by @cmwylie19 in #1894
• Enable more key managers for signing packages with cosign by @YrrepNoj in #1879
• Allow for zarf crane pulls and zarf crane pushes without an explicit tunnel or auth for internal registries by @dgershman in #1851
• Add only filter support and full init package support to zarf package remove by @Racer159 in #1855
• Add source file info to SBOM viewer to better track nested files and dataInjections by @Racer159 in #1865
• Add package version to the zarf package list output by @YrrepNoj in #1858

Fixes

• Change to podAntiAffinity when using the ReadWriteMany access mode for the registry to assist with rolling K8s Nodes by @Racer159 in #1898
• No longer rotate credentials on zarf init to assist with disaster recovery where a re-init is required @Racer159 in #1898
• Update Big Bang extension Flux GitRepository API version to remove deprecation warning by @mjnagel in #1933
• Fix deploying packages w/no explicit component contents (i.e. actions only) by @Noxsios in #1973

Rollup From v0.28 Patch Releases

• Use UID and GID for USER in Dockerfile instead of a named user by @flickerfly in #1922
• Fix the error return for building helm dependencies by @Racer159 in #1911
• Fix a bug with registry push/pull on detected but invalid clusters by @Racer159 in #1930
• Fix simple repos causing an 'Already Up to Date' error by @Racer159 in #1942
• Fix registry injector failures for generic images (i.e. the one from Iron Bank) by @Racer159 in #1896
• Properly catch user interrupts when using Zarf commands by @caesarshift in #1891
• Correctly create all namespaces when in YOLO mode by @YrrepNoj in #1878
• Only verify authentication to registry if creds exist and better handle registry scopes by @Noxsios in #1893
• Fix inclusion of empty files on package creation by @YrrepNoj in #1860
• Fix inline-oci:// create + publish using --output on zarf package create by @Noxsios in #1857
• Better detection of when to create state in custom init packages without the zaf-seed-registry by @Racer159 in #1855

Docs

• Refactor docs paths, standardize admonition syntax and in preparation for Hugo move by @bdfinst in #1944, #1947 and #1948

Rollup From v0.28 Patch Releases

• Improve Config File documentation by @cmwylie19 in #1912
• Fix grammar within the k8s types package by @cmwylie19 in #1937
• Update Git example to reference the Flux example instead of having it's own explanation by @cmwylie19 in #1935
• Update the Zarf definition of Generally Available ADR to be more clear by @Madeline-UX in #1905
• Fix rendering of the local file and manifests examples by @Racer159 in #1874

Dependencies

• Update all non-major dependencies by @renovate in #1866
• Update typescript-eslint monorepo to v6 (major) by @renovate in #1955
• Update dependency nodemon to v3 by @renovate in #1951
• Update dependency eslint-config-prettier to v9 by @renovate in #1950

Rollup From v0.28 Patch Releases

• Update dependency prettier to v3 by @renovate in #1880
• Update github.com/anchore/stereoscope digest to d1f3d76 by @renovate in #1919
• Update github.com/anchore/stereoscope digest to cd49355 by @renovate in #1680
• Update aws-actions/configure-aws-credentials digest to 5fd3084 by @renovate in #1825
• Update module github.com/fluxcd/source-controller/api to v1 by @renovate in #1877
• Update Terraform aws module in the variables example to v5 by @renovate in #1850
• Update svelte to v4 for deployment web UI by @renovate in #1840
• Update all non-major dependencies by @renovate in #1790

Development

• Refactor utils.DoHostnamesMatch to be more usable as a library by @cmwylie19 in #1953
• Reduce test disk usage and normalize git tests by @Racer159 in #1958 and #1967
• Add copy commands to the example package publish workflow to allow for uname -m by @Racer159 in #1959
• Add unit tests for validatePackageArchitecture() method by @lucasrod16 in #1957
• Add a text section to the slack json that notifies of nightly test failures by @Racer159 in #1964
• Disable grafana in the ...

v0.28.4

What's Changed

Features

• Add Zarf Agent support for Prometheus Metrics by @cmwylie19 in #1915
• Support --output on zarf version to return more detailed version information by @Noxsios in #1916
• Introduce backwards compatibility validation on package deploy by @lucasrod16 in #1909
• Add a template for ###ZARF_COMPONENT_NAME### to be used during component import by @cmwylie19 in #1923

Fixes

• Use UID and GID for USER in Dockerfile instead of a named user by @flickerfly in #1922
• Fix the error return for building helm dependencies by @Racer159 in #1911
• Fix a bug with registry push/pull on detected but invalid clusters by @Racer159 in #1930
• Fix simple repos causing an 'Already Up to Date' error by @Racer159 in #1942

Docs

• Improve Config File documentation by @cmwylie19 in #1912
• Fix grammar within the k8s types package by @cmwylie19 in #1937
• Update Git example to reference the Flux example instead of having it's own explanation by @cmwylie19 in #1935

Dependencies

• Update dependency prettier to v3 by @renovate in #1880
• Update github.com/anchore/stereoscope digest to d1f3d76 by @renovate in #1919

Developement

• Add a pending ADR for how to maintain the Zarf transform code for a Pepr Zarf Agent by @cmwylie19 in #1900
• Introduce a workflow for publishing an example application package as OCI to GHCR by @YrrepNoj in #1856 and #1926
• Update CODEOWNERS to replace @YrrepNoj with @cmwylie19 by @Racer159 in #1924
• Return images as an array of strings for all components in packager.FindImages by @cmwylie19 in #1927
• Add a slack webhook that triggers when nightly tests fail by @Racer159 in #1941
• Allow for the injector to be built in docker and uploaded to S3 by @Racer159 in #1917

New Contributors

• @flickerfly made their first contribution in #1922

Full Changelog: v0.28.3...v0.28.4

v0.28.3

What's Changed

Features

• Add additional flux patch override support to the Big Bang extension by @Racer159 in #1910
• Add the ability to specify Zarf variables as filepaths by @Racer159 in #1906

Fixes

• Fix registry injector failures for generic images (i.e. the one from Iron Bank) by @Racer159 in #1896

Docs

• Update the Zarf definition of Generally Available ADR to be more clear by @Madeline-UX in #1905

Full Changelog: v0.28.2...v0.28.3

v0.28.2

What's Changed

Features

• Add support for appending @ git refs to Helm chart git URLs by @cmwylie19 in #1892
• Add support for building chart sub-dependencies by @cmwylie19 in #1892
• Add jsonpath support to wait actions and zarf tools wait-for by @cmwylie19 in #1873
• Add support for named ports on Services in zarf connect by @cmwylie19 in #1894
• Enable more key managers for signing packages with cosign by @YrrepNoj in #1879

Fixes

• Properly catch user interrupts when using Zarf commands by @caesarshift in #1891
• Correctly create all namespaces when in YOLO mode by @YrrepNoj in #1878
• Only verify authentication to registry if creds exist and better handle registry scopes by @Noxsios in #1893

Dependencies

• Update github.com/anchore/stereoscope digest to cd49355 by @renovate in #1680
• Update aws-actions/configure-aws-credentials digest to 5fd3084 by @renovate in #1825
• Update module github.com/fluxcd/source-controller/api to v1 by @renovate in #1877

Development

• Reduce the size of the transform package for easier reuse as a library by @cmwylie19 in #1883
• Create Pending zarf bundle ADR to start work on multi-package orchestration by @Noxsios in #1820
• Create Pending Zarf hooks ADR to start work on handling environment prerequisites for components by @YrrepNoj in #1813
• Refactor large workflows into multiple jobs and fix the release workflow by @Racer159 in #1901, #1902, and #1903

New Contributors

• @caesarshift made their first contribution in #1891

Full Changelog: v0.28.1...v0.28.2

v0.28.1

What's Changed

Features

• Allow for zarf crane pulls and zarf crane pushes without an explicit tunnel or auth for internal registries by @dgershman in #1851
• Add only filter support and full init package support to zarf package remove by @Racer159 in #1855
• Add source file info to SBOM viewer to better track nested files and dataInjections by @Racer159 in #1865
• Add package version to the zarf package list output by @YrrepNoj in #1858

Fixes

• Fix inclusion of empty files on package creation by @YrrepNoj in #1860
• Fix inline-oci:// create + publish using --output on zarf package create by @Noxsios in #1857
• Better detection of when to create state in custom init packages without the zaf-seed-registry by @Racer159 in #1855

Docs

• Fix rendering of the local file and manifests examples by @Racer159 in #1874

Dependencies

• Update Terraform aws module in the variables example to v5 by @renovate in #1850
• Update svelte to v4 for deployment web UI by @renovate in #1840
• Update all non-major dependencies by @renovate in #1790

Full Changelog: v0.28.0...v0.28.1

v0.28.0

What's Changed

⚠️ Breaking Changes

• Update the default init package's k3s version to v1.27.2+k3s1 from v1.24.1+k3s1 by @renovate in #1709

This only impacts existing deployments using the k3s component from the default init package, and the deprecated APIs are outlined in the K8s Deprecated API Migration Guide. Chart manifests will need to be updated to support the new APIs and will need to be redeployed to the cluster ideally prior to upgrading k3s. Zarf-managed charts can detect deprecations and attempt migrations after a k3s update but any GitOps deployments will need to be updated manually (see the Helm mapkubeapis plugin if you need to do this after updating k3s)

Features

    

• Improve package confirmation UX and display currently set variables by @Racer159 / @Madeline-UX in #1682
• Improve error handling and log display during web UI deployments by @mike-winberry / @Madeline-UX in #1828
• Improve package selection UX for web UI package deployments by @mike-winberry / @Madeline-UX in #1687
• Add zarf tools crane root command flags (i.e. --platform and --insecure) by @Racer159 in #1848
• Add zarf tools crane ls command to view tags for a given image reference by @dgershman in #1835
• Add the ability to place files in the home directory with ~ in the target by @Racer159 in #1848

Rollup From v0.27 Patch Releases

• Add a package warnings section, unhide filtered components, and improve SBOM message user experience by @Racer159 in #1749
• Respect actions.defaults.MaxTotalSeconds within the Big Bang extension by @Noxsios in #1782

Fixes

• Fix git repository fallbacks for branch, tag, and full repository clones by @Racer159 in #1841
• Fix Pending pods causing the Zarf injection process to stall by @Racer159 in #1844
• Fix deploy page in web UI not properly handling fatal error responses by @mike-winberry in #1842

Rollup From v0.27 Patch Releases

• Correctly name the HelmRelease manifest file for the Big Bang extension by @mjnagel in #1748
• Fix filepaths not being allowed to be nonexistent during component compose by @Noxsios in #1758
• Fix Importing OCI skeleton components w/ no local resources by @Noxsios in #1774
• Fix Big Bang OCI compose and Big Bang --differential package creation by @Racer159 in #1762
• Fix htpasswd generation causing issues with external registry passwords longer than 72 bytes by @Racer159 in #1786

Docs

• Improve the component actions docs and examples (i.e. better explaining ./zarf) by @Racer159 in #1826
• Fix the component import examples not showing in docs by @Racer159 in #1843
• Update the Big Bang example to include a teardown script by @jacobbmay in #1817
• Fix dead README / CONTRIBUTING links by @Racer159 in #1800
• Add initial docs around alpha/beta/stable definitions and plans for General Availability (GA) by @Racer159 in #1812
• Update the Nerd Notes page to include more information about the Zarf Agent by @cmwylie19 in #1807
• Elaborate on each package's purpose in the packages/README.md file by @cmwylie19 in #1818

Rollup From v0.27 Patch Releases

• Improve package examples in Zarf documentation by @Noxsios in #1741
• Add a Zarf package create differential tutorial by @JasonvanBrackel in #1735
• Update the Zarf feature list and why to use Zarf by @Madeline-UX in #1769
• Remove untested / unused examples by @Noxsios in #1753

Dependencies

• Update all non-major dependencies by @renovate in #1709
• Update module github.com/moby/moby to v24 by @renovate in #1718
• Update aws-actions/configure-aws-credentials digest to 5727f24 by @renovate in #1761
• Update dependency prism-react-renderer to v2 by @renovate in #1643
• Removed unused direct dependencies for the web UI by @mike-winberry in #1822

Rollup From v0.27 Patch Releases

• Update dependency @fontsource/roboto to v5 by @renovate in #1738
• Update Gitea image to 1.19.3-rootless (with Gitea Helm Chart 8.3.0) by @renovate in #1505

Development

• Complete the Zarf General Availability ADR by @Racer159 in #1768
• Enhance backwards compatibility testing with more high-level Zarf primitives by @Racer159 in #1789
• Refactor / optimize internal OCI functions to enhance reuse by @Noxsios in #1764
• Reduce disk pressure in upgrade and release workflows by @Racer159 in #1847
• Fix Renovate ignoring the examples directory by @dgershman in #1836

Rollup From v0.27 Patch Releases

• Fix the nightly AWS EKS / ECR tests by @Racer159 in #1740
• Add GitHub URLs in zarf.yamls to the Renovate bot regex matcher by @Racer159 in #1755
• Properly remove files in parallel tests for component actions by @Racer159 in #1784
• Fix some issues with releases running out of space by @Racer159 in #1785

New Contributors

• @jacobbmay made their first contribution in #1817

Full Changelog: v0.27.1...v0.28.0

v0.27.1

What's Changed

Features

• Add a package warnings section, unhide filtered components, and improve SBOM message user experience by @Racer159 in #1749
• Respect actions.defaults.MaxTotalSeconds within the Big Bang extension by @Noxsios in #1782

Fixes

• Correctly name the HelmRelease manifest file for the Big Bang extension by @mjnagel in #1748
• Fix filepaths not being allowed to be nonexistent during component compose by @Noxsios in #1758
• Fix Importing OCI skeleton components w/ no local resources by @Noxsios in #1774
• Fix Big Bang OCI compose and Big Bang --differential package creation by @Racer159 in #1762
• Fix htpasswd generation causing issues with external registry passwords longer than 72 bytes by @Racer159 in #1786

Docs

• Improve package examples in Zarf documentation by @Noxsios in #1741
• Add a Zarf package create differential tutorial by @JasonvanBrackel in #1735
• Update the Zarf feature list and why to use Zarf by @Madeline-UX in #1769
• Remove untested / unused examples by @Noxsios in #1753

Dependencies

• Update dependency @fontsource/roboto to v5 by @renovate in #1738
• Update Gitea image to 1.19.3-rootless (with Gitea Helm Chart 8.3.0) by @renovate in #1505

Development

• Fix the nightly AWS EKS / ECR tests by @Racer159 in #1740
• Add GitHub URLs in zarf.yamls to the Renovate bot regex matcher by @Racer159 in #1755
• Properly remove files in parallel tests for component actions by @Racer159 in #1784
• Fix some issues with releases running out of space by @Racer159 in #1785

Full Changelog: v0.27.0...v0.27.1