v0.27.0

What's Changed

⚠️ Breaking Changes

• Internal package structure changes will require packages built with v0.27.0 to be deployed with v0.27.0 or higher by @Noxsios in #1469 and by @Racer159 #1696

  Previously built packages are still compatible with v0.27.0, only newly created packages will require the higher version

• Component import paths have been made relative to the child zarf.yaml for files, data injections and actions (similar to how charts was previously). These paths will need to be updated to be relative to the child instead of the parent.

Features

• Expand component composability to include OCI imports by @Noxsios in #1469
• Enable differential package creation to consider imported OCI component versions by @YrrepNoj in #1714
• Improve SBOM glob matching and add the ability to template folders of files in the files noun by @Racer159 in #1696
• Add an SBOM section to the deploy review page of the Web UI by @mike-winberry in #1713
• Add scheduling logic to consider node taints when choosing images for the Zarf injector by @ragingpastry in #1731

Rollup From v0.26 Patch Releases

• Big Bang support for YOLO mode by @willswire in #1681
• Add zarf tools download-init to more easily retrieve the init package from releases by @Racer159 in #1710
• Add --kube-version override to zarf prepare find-images by @brandtkeller in #1662
• Add Helm HIP 15 mage annotation discovery support in zarf prepare find-images by @Racer159 in #1708
• Expose registry PVC accessMode as a zarf init variable by @willswire in #1664
• Add the ability to zarf connect to services in the Web UI by @mike-winberry in #1638
• Add the ability to specify registry overrides on package create by @Racer159 in #1683
• Support for differential package creation by specifying a previously built package with the --differential flag on zarf package create by @YrrepNoj in #1650
• Allow remote manifests (both files and kustomizations) by @Noxsios in #1633
• Initial Big Bang 2.0 support by @dgershman in #1611
• Adopt pre-existing resources into Zarf-managed Helm Charts by @Racer159 in #1626
• Discover jobs/hooks in zarf prepare find-images and show diff for zarf prepare patch-git by @Racer159 in #1645

Fixes

• Fix inaccessible clusters in a ~/.kube/config causing a failure during the architecture check by @Racer159 in #1724
• Ensure variables are uppercase when specified with --set by @YrrepNoj in #1728
• Fix full-repo authenticated git clone "authentication required" failures by @Racer159 in #1727
• Improve crane image pushing to reduce likelihood of image push stalling by @Racer159 in #1721
• Save/update deployed package state per component to assist rollbacks by @YrrepNoj in #1736

Rollup From v0.26 Patch Releases

• Replace Zarf Logo in WebUI with an HQ version by @mike-winberry in #1700
• [SECURITY] Resolve areas where sensitive state was being stored in Zarf logs by @Racer159 in #1692
• Improve messaging when the package architecture doesn't match cluster architecture by @lucasrod16 in #1495
• Fix issues pulling packages from some unauthenticated OCI registries by @Noxsios in #1678
• Fix some failing Big Bang 2.0 deployments by @willswire in #1648

Docs

• Improve and add clarity to the Zarf Package Components page by @Noxsios in #1469

Rollup From v0.26 Patch Releases

• Capitalize WordPress in the docs correctly by @ottok in #1702
• Add Package SBOM page and include more info on the View SBOMs page by @Racer159 in #1688
• Correct docs sidebar order to match Information Architecture navigation by @Racer159 in #1705
• Add a Zarf resource adoption tutorial by @JasonvanBrackel in #1691
• Update the help text for the --storage-class flag of zarf init by @RothAndrew in #1719
• Expand on package create information and add a Package Create and a Customize 'init' Package tutorial by @Racer159 in #1679
• Fix docs links on the Zarf 'init' Package page by @Racer159 in #1674
• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639
• Update the Zarf package create, package deploy and retro arcade tutorials by @laurenmengert in #1601
• Update the OCI package publish tutorial by @JasonvanBrackel in #1517
• Update when to where in package deploy tutorial by @cmwylie19 in #1660
• Improve the init package page with more configuration and lifecycle information by @Racer159 in #1644
• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639
• Improved information architecture - renamed Developer Guide to Contribute to Zarf by @Jessy-Morris in #1634
• Added a helm with git example by @dgershman in #1596
• Updates made to the "Set Up and Install" page by @Jessy-Morris in #1597
• Introduce a docs page for the previous beta-release of the Zarf UI by @Madeline-UX in #1612

Dependencies

• Update google/go-containerregistry (crane) to v0.15.2 by @Racer159 in #1721

Rollup From v0.26 Patch Releases

• [SECURITY] Update library/registry to 2.8.2 and all other non-major dependencies by @renovate in #1646
• Change gitea to the rootless version to enable compatibility with EFS and enhance security by @corang in #1706
• Update aws-actions/configure-aws-credentials action to v2 by @renovate in #1673
• Update all non-major dependencies by @renovate in #1562

Development

Rollup From v0.26 Patch Releases

• Improve GitHub issue templates (now with gherkin!) by @Racer159 in #1689
• Make the release process cleanup more aggressive by @Racer159 in #1695, #1699 and #1701
• Add explicit permissions to each CI workflow by @Racer159 in #1668
• Pin CI action dependencies by @Racer159 in https://g...

v0.26.4

What's Changed

Features

• Big Bang support for YOLO mode by @willswire in #1681
• Add zarf tools download-init to more easily retrieve the init package from releases by @Racer159 in #1710
• Add --kube-version override to zarf prepare find-images by @brandtkeller in #1662
• Add Helm HIP 15 mage annotation discovery support in zarf prepare find-images by @Racer159 in #1708

Fixes

• Replace Zarf Logo in WebUI with an HQ version by @mike-winberry in #1700

Docs

• Capitalize WordPress in the docs correctly by @ottok in #1702
• Add Package SBOM page and include more info on the View SBOMs page by @Racer159 in #1688
• Correct docs sidebar order to match Information Architecture navigation by @Racer159 in #1705
• Add a Zarf resource adoption tutorial by @JasonvanBrackel in #1691
• Update the help text for the --storage-class flag of zarf init by @RothAndrew in #1719

Dependencies

• [SECURITY] Update library/registry to 2.8.2 and all other non-major dependencies by @renovate in #1646

⚠️ NOTE - You can use library/registry:2.8.2 on older versions of Zarf by following the Creating a Custom 'init' Package Tutorial

• Change gitea to the rootless version to enable compatibility with EFS and enhance security by @corang in #1706

New Contributors

• @ottok made their first contribution in #1702

Full Changelog: v0.26.3...v0.26.4

v0.26.3

What's Changed

Features

• Expose registry PVC accessMode as a zarf init variable by @willswire in #1664
• Add the ability to zarf connect to services in the Web UI by @mike-winberry in #1638
• Add the ability to specify registry overrides on package create by @Racer159 in #1683

Fixes

• [SECURITY] Resolve areas where sensitive state was being stored in Zarf logs by @Racer159 in #1692
• Improve messaging when the package architecture doesn't match cluster architecture by @lucasrod16 in #1495
• Fix issues pulling packages from some unauthenticated OCI registries by @Noxsios in #1678

Docs

• Expand on package create information and add a Package Create and a Customize 'init' Package tutorial by @Racer159 in #1679
• Fix docs links on the Zarf 'init' Package page by @Racer159 in #1674

Dependencies

• Update aws-actions/configure-aws-credentials action to v2 by @renovate in #1673

Development

• Improve GitHub issue templates (now with gherkin!) by @Racer159 in #1689
• Make the release process cleanup more aggressive by @Racer159 in #1695, #1699 and #1701

Full Changelog: v0.26.2...v0.26.3

v0.26.2

What's Changed

Features

• Support for differential package creation by specifying a previously built package with the --differential flag on zarf package create by @YrrepNoj in #1650

⚠️ NOTE - This currently will diff images and repos and is currently meant for development use cases. Production use is possible but we will be looking to add more user messaging and package state management in the future to reduce the potential for churn with many diffs.

• Allow remote manifests (both files and kustomizations) by @Noxsios in #1633

Docs

• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639
• Update the Zarf package create, package deploy and retro arcade tutorials by @laurenmengert in #1601
• Update the OCI package publish tutorial by @JasonvanBrackel in #1517
• Update when to where in package deploy tutorial by @cmwylie19 in #1660
• Improve the init package page with more configuration and lifecycle information by @Racer159 in #1644
• Update the docs navigation to improve doc discoverability by @Jessy-Morris in #1639

Development

• Add explicit permissions to each CI workflow by @Racer159 in #1668
• Pin CI action dependencies by @Racer159 in #1669

New Contributors

• @cmwylie19 made their first contribution in #1660

Full Changelog: v0.26.1...v0.26.2

v0.26.1

What's Changed

Features

• Initial Big Bang 2.0 support by @dgershman in #1611
• Adopt pre-existing resources into Zarf-managed Helm Charts by @Racer159 in #1626
• Discover jobs/hooks in zarf prepare find-images and show diff for zarf prepare patch-git by @Racer159 in #1645

Fixes

• Fix some failing Big Bang 2.0 deployments by @willswire in #1648

Docs

• Improved information architecture - renamed Developer Guide to Contribute to Zarf by @Jessy-Morris in #1634
• Added a helm with git example by @dgershman in #1596
• Updates made to the "Set Up and Install" page by @Jessy-Morris in #1597
• Introduce a docs page for the previous beta-release of the Zarf UI by @Madeline-UX in #1612

Dependencies

• Update all non-major dependencies by @renovate in #1562

Development

• Added renovate support for Big Bang by @dgershman in #1585
• Fix the Big Bang tests to support upgrading v1 to v2 by @Racer159 in #1640
• Add permisssions to nightly workflow to request the OIDC JWT token by @YrrepNoj in #1627
• Update codeowners to drop non-active approvers and add @Noxsios in more places by @Racer159 in #1647

New Contributors

• @willswire made their first contribution in #1648

Full Changelog: v0.26.0...v0.26.1

v0.26.0

⚠️ Breaking changes

• Image CRCs are now appended to tags instead of repository names to better dedupe image layers on push by @Racer159 in #1590

  When upgrading you will need to reinitialize the cluster and redeploy image-containing packages to create the new image refs. (i.e. 127.0.0.1:31999/library/nginx-3793515731:1.23.3 becomes 127.0.0.1:31999/library/nginx:1.23.3-zarf-3793515731) - existing pods will continue to run but may need to pull the new images on failures

• Zarf also now officially requires Big Bang version 1.54.0 or greater in the Big Bang extension by @dgershman in #1559

Features

     

• [BETA] Zarf Web UI now supports the Package Deployment Lifecycle by @mike-winberry in #1522

  To launch the web UI, you can run zarf dev ui - we will be looking for feedback and volunteers to test this further soon

• [EXPERIMENTAL] Zarf Agent Proxy Mode for git repos and npm/pypi/generic package artifacts by @Racer159 in #809

  To learn more about this mode see: https://github.com/defenseunicorns/zarf-package-dev-dependencies

• Enable swapping the registry image (i.e. Iron Bank or Enterprise-provided images) for custom init packages by @Racer159 in #1579

• Allow shell preferences in Zarf actions and prefer cmd for dataInjections on Windows by @Racer159 in #1581

Rollup From v0.25 Patch Releases

• Added an optional Gitea Virtual Service to the Big Bang example by @dgershman in #1475
• Added the ability to merge valuesFiles with the BigBang extension through composability by @runyontr in #1477
• Normalize variables across functionality and introduce setVariables, autoIndent and sensitive keys by @Racer159 in #1474
• Introduce validation of package contents with checksums and verification with package signatures with --key by @YrrepNoj in #1467

Fixes

• Fixed an issue where specifying a custom repo for the Big Bang extension fails when getting flux by @dgershman in #1613
• Fixed an issue when unpacking sboms on zarf package inspect from some older Zarf packages by @Racer159 in #1621
• Fix internal registry HPA scaledown behavior, and improve registry push UX by @Racer159 in #1590
• Fix a failure when running zarf tools kubectl version by @Racer159 in #1620

Rollup From v0.25 Patch Releases

• Bump BB version by @runyontr in #1549
• Fix Big Bang helm release rendering on k8s < 1.25 by @runyontr in #1554
• Fix go-git operation logging by @Racer159 in #1555
• Fix zarf package remove always requiring a cluster by @Racer159 in #1556
• Add additional details for debugging registry pushes by @dgershman in #1558
• Update the Big Bang ingress certificates by @dgershman in #1471
• Update the calculation for the expected bytes during image layer pulls by @YrrepNoj in #1489
• Fix helm not rolling back properly when a malformed package is deployed by @Racer159 in #1480
• Fix the package deploy error message when package and cluster architectures don't match by @lucasrod16 in #1494
• Fix Openshift issues mounting directories in the agent pod, and remove incorrect values by @Racer159 in #1515
• Properly pass package architecture from metadata by @Racer159 in #1497
• Fix root command help printing by @Racer159 in #1524
• Fix issues with Windows dataInjections using sh instead of powershell by @Racer159 in #1520

Docs

• Docs updates to the "Understanding Zarf Packages" page by @Jessy-Morris in #1548
• Bump to Big Bang 1.57.1 in the Big Bang Example by @dgershman in #1569
• Docs updates to the "The Zarf init Package" page by @Jessy-Morris in #1574
• Fix README setup-zarf link and brew install commands on overview page by @atz in #1584
• Improve the key not provided message on package signing validation by @Racer159 in #1578
• Docs updates to the "Component Actions" page by @Jessy-Morris in #1587
• Docs updates to the "VS Code" page by @Jessy-Morris in #1589
• Add a style guide page and copy for docs contributors by @Jessy-Morris in #1586
• Update --confirm flag description for init and package deploy cmd by @Madeline-UX in #1602
• Docs updates to the "Code Testing" page by @Jessy-Morris in #1605

Rollup From v0.25 Patch Releases

• Docs edits for "Zarf Packages" page by @Jessy-Morris in #1544
• Initializing a Cluster and Creating a Cluster with Zarf walkthrough updates by @josiblair in #1531
• Update the deploy walkthrough to use ansi2html by @JasonvanBrackel in #1470
• Update logging walkthrough by @JasonvanBrackel in #1462
• Docs edits for "Understand the Basics" by @Jessy-Morris in #1485
• Update schema docs to include information about OCI registries for helm charts by @lucasrod16 in #1464
• Improve zarf init CLI examples by @dgershman in #1492
• Docs edits for "Overview" page by @Jessy-Morris in #1496
• Docs edits to "The Zarf CLI" page by @Jessy-Morris in #1519
• Docs edits to "Getting Started" page by @Jessy-Morris in #1508
• Docs edits to User Guide page by @Jessy-Morris in #1512
• Docs edits for "Building Your Own Zarf CLI" page by @Jessy-Morris in #1528
• Docs updates to "Common CLI Uses" page by @Jessy-Morris in #1533

Dependencies

• Update dependency @sveltejs/kit to 1.15.2 [security] by @renovate in #1576
• Update github.com/anchore/stereoscope diges...

v0.25.2

What's Changed

Fixes

• Bump BB version by @runyontr in #1549
• Fix Big Bang helm release rendering on k8s < 1.25 by @runyontr in #1554
• Fix go-git operation logging by @Racer159 in #1555
• Fix zarf package remove always requiring a cluster by @Racer159 in #1556
• Add additional details for debugging registry pushes by @dgershman in #1558

Documentation

• Docs edits for "Zarf Packages" page by @Jessy-Morris in #1544
• Initializing a Cluster and Creating a Cluster with Zarf walkthrough updates by @josiblair in #1531

Dependencies

• Swap Zarf agent Dockerfile base image to Chainguard static by @Racer159 in #1540
• Update dependency @sveltejs/kit to 1.15.1 [security] by @renovate in #1557
• Update all non-major dependencies by @renovate in #1537 and in #1561

Development

• No longer explicitly check for deprecated text in the upgrade test by @Racer159 in #1546
• Resolve remaining linting issues by @Racer159 in #1550
• Change big bang in tests from repo1 to GitHub to reduce CI flakes due to repo1 availability by @Racer159 in #1547

New Contributors

• @josiblair made their first contribution in #1531

Full Changelog: v0.25.1...v0.25.2

v0.25.1

What's Changed

Features

• Added an optional Gitea Virtual Service to the Big Bang example by @dgershman in #1475
• Added the ability to merge valuesFiles with the BigBang extension through composability by @runyontr in #1477
• Normalize variables across functionality and introduce setVariables, autoIndent and sensitive keys by @Racer159 in #1474
• Introduce validation of package contents with checksums and verification with package signatures with --key by @YrrepNoj in #1467

Fixes

• Update the Big Bang ingress certificates by @dgershman in #1471
• Update the calculation for the expected bytes during image layer pulls by @YrrepNoj in #1489
• Fix helm not rolling back properly when a malformed package is deployed by @Racer159 in #1480
• Fix the package deploy error message when package and cluster architectures don't match by @lucasrod16 in #1494
• Fix Openshift issues mounting directories in the agent pod, and remove incorrect values by @Racer159 in #1515
• Properly pass package architecture from metadata by @Racer159 in #1497
• Fix root command help printing by @Racer159 in #1524
• Fix issues with Windows dataInjections using sh instead of powershell by @Racer159 in #1520

Documentation

• Update the deploy walkthrough to use ansi2html by @JasonvanBrackel in #1470
• Update logging walkthrough by @JasonvanBrackel in #1462
• Docs edits for "Understand the Basics" by @Jessy-Morris in #1485
• Update schema docs to include information about OCI registries for helm charts by @lucasrod16 in #1464
• Improve zarf init CLI examples by @dgershman in #1492
• Docs edits for "Overview" page by @Jessy-Morris in #1496
• Docs edits to "The Zarf CLI" page by @Jessy-Morris in #1519
• Docs edits to "Getting Started" page by @Jessy-Morris in #1508
• Docs edits to User Guide page by @Jessy-Morris in #1512
• Docs edits for "Building Your Own Zarf CLI" page by @Jessy-Morris in #1528
• Docs updates to "Common CLI Uses" page by @Jessy-Morris in #1533

Dependencies

• Update github/codeql-action action to v2 by @renovate in #1431
• Update actions/setup-go action to v4 by @renovate in #1440
• Uupdate all non-major dependencies by @renovate in #1430 and #1465 and #1535
• Update github.com/anchore/stereoscope digest to 7928713 by @renovate in #1340
• Update dependency @sveltejs/adapter-static to v2 by @renovate in #1335
• Update dependency typescript to v5 by @renovate in #1466
• Update dependency @sveltejs/package to v2 by @renovate in #1368
• Update dependency quicktype to v23 by @renovate in #1365
• Update dependency concurrently to v8 by @renovate in #1504
• Update dependency @tsconfig/svelte to v4 by @renovate in #1481

Development

• Update CODEOWNERS by @RothAndrew in #1478
• Increase the timeout for the helm wait test by @Racer159 in #1530
• Hotfix the release running out of space by @Racer159 in #1538

New Contributors

• @dgershman made their first contribution in #1471

Full Changelog: v0.25.0...v0.25.1

v0.25.0

⚠️ Breaking changes

• Zarf packages now have a different internal layout in order to better support OCI - these are not deployable by earlier Zarf versions
• Git repository caching has been removed - if you relied on this feature it is recommended to move to file:// URLs instead

Features

• Introduce a Big Bang Component Extension to simplify BB package creation by @runyontr in #1094
• Support Helm OCI Charts by @jeff-mccoy in #1346
• Add tools kubectl, tools wait-for & Wait Action. by @jeff-mccoy in #1373
• Add prerequisites check and delete flag support for the longhorn package by @JasonvanBrackel in #1378
• Add git refspec / branch support, non-linear tag support & simplify git logic by @jeff-mccoy in #1404
• Zarf OCI Package Support (publish/push/deploy) by @Noxsios in #1423
• Add Big Bang helm.sh/images annotation conditions checking by @Racer159 in #1451
• Add OCI manifest annotations on package publish from Zarf package metadata by @Noxsios in #1452

Fixes

• Update git repository push retry messaging by @Yash-C-330 in #1240
• Fix issues with privileged ports in longhorn example by @JasonvanBrackel in #1333
• Hotfix docker CRI support by @jeff-mccoy in #1349
• Resolve nested go templating issues in generated helm charts by @jeff-mccoy in #1350
• Restore SBOM display messaging on interactive package deploy by @Racer159 in #1356
• Fix visual glitches in file download progress bars by @Racer159 in #1380
• Remove git caching in favor of file:// URLs by @Racer159 in #1398
• Fix OCI pulling of helm chart versions by @Racer159 in #1427
• Correct progress bar bytes output by @nik-don in #1441
• Resolve issues performing package pull then package deploy by @Noxsios in #1446
• Fix OCI publish interactions with the progress bar by @Noxsios in #1447
• Update short description of zarf version command by @lucasrod16 in #1449

Docs

• Update docs with a note about different git protocol schemes by @Racer159 in #1351
• Fix the Edit this Page button on https://docs.zarf.dev by @bdfinst in #1363
• Make schema documentation more useful by @Racer159 in #1381
• Fixed broken links on the Understand the Basics page by @TheFutonEng in #1386
• Content and style updates to docs overview page by @Jessy-Morris in #1403 and @Madeline-UX in #1394
• Fix a duplicated link typo in the Zarf Packages docs by @ThomasBuchinger in #1414
• Fix links in zarf-packages docs by @ThomasBuchinger in #1428
• Fix the directory reference for ADRs in the Contributor Guide by @mjnagel in #1442
• Update the Getting Started VS Code page by @Madeline-UX in #1459
• Reorganize Doom walkthrough using the new walkthrough format by @JasonvanBrackel in #1456

Dependencies

• Update all non-major dependencies (including gitea to 1.18.5 and promtail to 2.7.2) by @renovate in #1320
• Update go dependencies [SECURITY] by @Racer159 in #1358
• Update dependency undici to 5.19.1 [SECURITY] by @renovate in #1367

Development

• Update internal, package, prepare to use lang/english by @andrewg-xyz in #1342
• Cleanup Github issue templates by @Racer159 in #1355
• Add wirewc to CODEOWNERS for docs/examples by @Racer159 in #1388
• Add relates-to field to our PR template for multi-pr issues by @Racer159 in #1406
• Update the create-git test to remove short sha references by @Racer159 in #1415
• OpenSSF Scorecard and github action file for the same by @abhiyant-10 in #1419
• Fix Big Bang test running for external contributors @Racer159 in #1432 and #1453
• Introduce a UX Test issue template by @Madeline-UX in #1412

New Contributors

• @nik-don made their first contribution in #1441
• @lucasrod16 made their first contribution in #1449
• @abhiyant-10 made their first contribution in #1419
• @Jessy-Morris made their first contribution in #1403
• @runyontr made their first contribution in #1094
• @ThomasBuchinger made their first contribution in #1414
• @Yash-C-330 made their first contribution in #1240

Full Changelog: v0.24.0...v0.25.0

v0.25.0-rc2

What's Changed

• [process] OpenSSF Scorecard and github action file for the same by @abhiyant-10 in #1419
• [fix] Fix OCI pulling of helm chart versions by @Racer159 in #1427
• [docs] Fix links in zarf-packages docs by @ThomasBuchinger in #1428
• [deps] Update all non-major dependencies (including gitea to 1.18.5 and promtail to 2.7.2) by @renovate in #1320
• [fix] Fix issues with privileged ports in longhorn example by @JasonvanBrackel in #1333
• [feat] Zarf OCI Package Support (publish/push/deploy) by @Noxsios in #1423
• [fix] Remove temp sbom files by @Racer159 in #1436
• [process] Don't run the big bang test for externals who don't have the IB username by @Racer159 in #1432

New Contributors

• @abhiyant-10 made their first contribution in #1419

Full Changelog: v0.25.0-rc1...v0.25.0-rc2