Zarf Versions Save

What's Changed

• fix: add redirect so old zarf base link is compatiable by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2432
• ci: pin third-party gh actions by hash by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2433
• docs: add redirect for examples by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2438
• docs: update contributing and pre-commit by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2439
• ci: fix revive image ref in lint workflow by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2436
• fix: filter on running pods when finding an image for injector pod by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2415
• fix: readme dead links by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2442
• fix: differential package create with non local sources by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2444
• refactor: move variables into separate package by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2414
• ci: add top level workflow permission to commitlint by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2449
• ci: remove unused env var from codeql workflow by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2450
• chore: cleanup root level files and add SPDX check for Go files by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2431
• feat: config to enable resilient registry by @Michael-Kruggel in https://github.com/defenseunicorns/zarf/pull/2440
• docs: init package clarity and cleanup by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2447
• ci: compare cves to main by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2448
• test: unpin version in bigbang extension test by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2459
• fix: broken schema from unexpanded embedded variables by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2458
• fix: error on create if an index sha is used by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2429

New Contributors

• @Michael-Kruggel made their first contribution in https://github.com/defenseunicorns/zarf/pull/2440

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.33.0...v0.33.1

What's Changed

• fix: update deprecated syft packages command to syft scan by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2399
• chore: move helpers to defenseunicorns/pkg by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2402
• fix(deps): update github.com/anchore/clio digest to fb5fc4c by @renovate in https://github.com/defenseunicorns/zarf/pull/2366
• feat(tools): add yq by @zachariahmiller in https://github.com/defenseunicorns/zarf/pull/2406
• chore: switch to use oci lib in defenseunicorns/pkg by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2404
• fix(deps): update module github.com/defenseunicorns/pkg/helpers to v1 by @renovate in https://github.com/defenseunicorns/zarf/pull/2411
• fix: use env var for PR title in commitlint workflow to prevent untrusted script injection by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2418
• fix: use default GITHUB_TOKEN for ossf/scorecard-action by @bburky in https://github.com/defenseunicorns/zarf/pull/2416
• fix: remove duplicate logic for writing image layers to disk concurrently by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2409
• feat: add option to skip cosign lookup during find images by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2427
• feat: allow chart deploy overrides ALPHA by @naveensrinivasan in https://github.com/defenseunicorns/zarf/pull/2403
• chore: update pull_request_template.md by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2428
• ci: pin k3s image version in k3d github action by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2430
• feat(docs): port docs to starlight by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2315

New Contributors

• @zachariahmiller made their first contribution in https://github.com/defenseunicorns/zarf/pull/2406
• @bburky made their first contribution in https://github.com/defenseunicorns/zarf/pull/2416

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.6...v0.33.0

[0.32.6] - 2024-03-22

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• [ALPHA] feat: package generation ALPHA by @andrewg-xyz in #2269
• (lib) feat(lib): configurable log file location by @Noxsios in #2380
• [BREAKING] feat!: filter package components with strategy interface by @Noxsios in #2321

🐛 Bug Fixes

• fix: refactor create stages into separate lib by @lucasrod16 in #2223
• fix: handle registry caBundle as a multiline string by @AbrohamLincoln in #2381
• (regression) fix: populate p.sbomViewFiles on deploy and mirror by @lucasrod16 in #2386
• fix: allow absolute paths for differential packages by @AustinAbro321 in #2397
• fix: hotfix skeleton publish by @Noxsios in #2398

🚜 Refactor

• refactor: split helpers/exec libs by @Racer159 in #2379

🧪 Testing

• test: data injection flake by @lucasrod16 in #2361

⚙️ Miscellaneous Tasks

• ci: add commitlint workflow and update contributing guide by @lucasrod16 in #2391

🛡️ Security

• (release) build: create PRs on homebrew-tap by @Noxsios in #2385

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.5...v0.32.6

[0.32.5] - 2024-03-11

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• feat: add missing vendored tool version commands by @eddiezane in #2232
• feat: add --why flag for zarf dev find-images by @waveywaves in #2309
• feat: set variables on find images by @AustinAbro321 in #2282
• feat: add configurable backoff and retries for Zarf operations by @Racer159 in #2345

🐛 Bug Fixes

• (deps): update github.com/anchore/clio digest to abcb719 by @renovate[bot] in #2347
• (ci): change ECR image to docker.io image by @AustinAbro321 in #2353
• fix: added OCI Image Index mediaType by @mdaizcorbe in #2352
• fix: package publish progress bar frozen at zero by @Noxsios in #2367
• (release) hotfix publish not respecting source package architecture by @Noxsios in #2376

📚 Documentation

• chore: fix spelling by @AustinAbro321 in #2333
• docs: formatting and grammar by @beholdenkey in #2350

⚙️ Miscellaneous Tasks

• chore: sorted go imports by @naveensrinivasan in #2349
• chore: fix bb test by @AustinAbro321 in #2340
• chore: update CODEOWNERS with @AustinAbro321 by @Racer159 in #2354
• chore: refactor and purify the OCI library within Zarf by @AustinAbro321 in #2235
• chore: default to temp zarf cache in e2e tests by @AustinAbro321 in #2355

🛡️ Security

• chore: configure agent server to avoid slowloris attack by @naveensrinivasan in #2342
• chore: fix implicit memory aliasing in for loop by @naveensrinivasan in #2341
• (release): update release workflow to use token from gh app by @Noxsios in #2368
• (release): use release environment secrets by @Noxsios in #2374

First Time Contributors

• @eddiezane made their first contribution in #2232
• @beholdenkey made their first contribution in #2350
• @mdaizcorbe made their first contribution in #2352

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.4...v0.32.5

What's Changed

Fixes

• Improve cmd failure messaging when no timeout or retries are given by @docandrew in https://github.com/defenseunicorns/zarf/pull/2301
• Revert init package storageclass checks for git server and seed registry by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2311
• Fix multi-part tarballs being mismatched sizes by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2314
• Change text template detection to check first and last 512 bytes by @WeaponX314 in https://github.com/defenseunicorns/zarf/pull/2310
• Improve zarf tools registry prune messaging by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2323
• Add http request header timeout to mitigate stalling image push by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2319
• Allow host+subpath as the source registry for --registry-override in package create by @waveywaves in https://github.com/defenseunicorns/zarf/pull/2306

Dependencies

• Update github.com/anchore/clio digest to cb94e40 by @renovate in https://github.com/defenseunicorns/zarf/pull/2294, https://github.com/defenseunicorns/zarf/pull/2297 and https://github.com/defenseunicorns/zarf/pull/2300
• [security] Update module helm.sh/helm/v3 to v3.14.2 by @renovate in https://github.com/defenseunicorns/zarf/pull/2307 and https://github.com/defenseunicorns/zarf/pull/2329
• Update actions/checkout action to v4 by @renovate in https://github.com/defenseunicorns/zarf/pull/2317
• Update actions/dependency-review-action action to v4 by @renovate in https://github.com/defenseunicorns/zarf/pull/2318

Docs

• Update Zarf roadmap per 2024 goals by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2305

Development

• Included Dependency Review action for PR reviews by @naveensrinivasan in https://github.com/defenseunicorns/zarf/pull/2298
• Resolve CodeQL linting issues across Zarf by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2322

New Contributors

• @docandrew made their first contribution in https://github.com/defenseunicorns/zarf/pull/2301
• @naveensrinivasan made their first contribution in https://github.com/defenseunicorns/zarf/pull/2298
• @waveywaves made their first contribution in https://github.com/defenseunicorns/zarf/pull/2306

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.3...v0.32.4

What's Changed

Fixes

• Properly handle panic that could occur during checksum validation by @mjnagel in https://github.com/defenseunicorns/zarf/pull/2262
• Add the --key flag to the init cmd to properly allow for signed init packages by @dgershman in https://github.com/defenseunicorns/zarf/pull/2259
• Restore destroy script functionality during zarf destroy by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2274
• Fix symlink inclusion within component resources by @dgershman in https://github.com/defenseunicorns/zarf/pull/2256
• Use memory friendly file split logic for partial packages by @daniel-palmer-gu in https://github.com/defenseunicorns/zarf/pull/2264
• Fix reproducible tarball creation on Windows systems by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2293

Docs

• Make branding more consistent and add community meetup references to docs by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2258

Dependencies

• Update github.com/anchore/clio digest by @renovate in https://github.com/defenseunicorns/zarf/pull/2277 and https://github.com/defenseunicorns/zarf/pull/2283
• Update all non-major dependencies (including Gitea v1.21.5, Syft v0.100.0, K9s v0.31.7 and Crane v0.19.0) by @renovate in https://github.com/defenseunicorns/zarf/pull/2187

Development

• Add a more robust chart search regexManager by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2278 and https://github.com/defenseunicorns/zarf/pull/2284
• Partial refactor of injector logic in k8s, and cluster packages by @chrishorton in https://github.com/defenseunicorns/zarf/pull/2271

New Contributors

• @daniel-palmer-gu made their first contribution in https://github.com/defenseunicorns/zarf/pull/2264

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.2...v0.32.3

What's Changed

Features

• Support authenticated Helm repositories that have been configured with helm repo add by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2196
• Verify that the specified storage class exists during zarf init by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2180
• Check for available node resources before building injector pod by @chrishorton in https://github.com/defenseunicorns/zarf/pull/2220
• Officially support yaml extensions within the zarf.yaml using x- keys by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2217

Fixes

• Fix the inclusion of helm sub commands when rendering zarf tools help by @jbrewer3 in https://github.com/defenseunicorns/zarf/pull/2216

Docs

• Fix typos in the extension README.md by @mjnagel in https://github.com/defenseunicorns/zarf/pull/2227
• Fix a small grammatical error in the base README.md by @cmwylie19 in https://github.com/defenseunicorns/zarf/pull/2219

Dependencies

• Update github.com/anchore/clio digest to 89e2fe8 by @renovate in https://github.com/defenseunicorns/zarf/pull/2214
• Update github.com/anchore/clio digest to a5e93b6 by @renovate in https://github.com/defenseunicorns/zarf/pull/2229
• Update github.com/anchore/stereoscope digest to eb656fc by @renovate in https://github.com/defenseunicorns/zarf/pull/2230

Development

• Remove workflow for automatically adding issues to the zarf project by @YrrepNoj in https://github.com/defenseunicorns/zarf/pull/2239
• Delete unnecessary waitgroup from concurrencyTools by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2244
• Update NewOrasRemote to take ocispec.Platform as an argument by @decleaver in https://github.com/defenseunicorns/zarf/pull/2241

New Contributors

• @jbrewer3 made their first contribution in https://github.com/defenseunicorns/zarf/pull/2216
• @chrishorton made their first contribution in https://github.com/defenseunicorns/zarf/pull/2220

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.1...v0.32.2

What's Changed

Fixes

• ResolveRoot now properly returns an error when a target platform is not provided when used as a library by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2212
• Fix reproducibility of internal tarballs for components + sboms to allow better OCI layer reuse by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2210

Docs

• Remove dos-games skeleton references and instead use the skeleton architecture index by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2208

Dependencies

• [security] Update github.com/go-git/go-git/v5 to v5.11.0 by @renovate in https://github.com/defenseunicorns/zarf/pull/2209
• [security] Update github.com/containerd/containerd to v1.7.11 by @renovate in https://github.com/defenseunicorns/zarf/pull/2209
• Update github.com/anchore/syft to v0.99.0 by @renovate in https://github.com/defenseunicorns/zarf/pull/2185
• Update github.com/anchore/clio digest to 3e50431 by @renovate in https://github.com/defenseunicorns/zarf/pull/2207
• Update github.com/anchore/stereoscope digest to 590920d by @renovate in https://github.com/defenseunicorns/zarf/pull/2206
• Update github/codeql-action action to v3 by @renovate in https://github.com/defenseunicorns/zarf/pull/2191

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.32.0...v0.32.1

What's Changed

:warning: Breaking Changes

• Gitea has been updated from the 8.x series chart (app version 1.19.3) to the 10.x series chart (app version 1.21.2) - this update contains breaking changes and should be tested if you are using this component - default Zarf installs will upgrade automatically but more advanced configurations / use cases should be reviewed. Gitea Release Notes
• Zarf package OCI references now use OCI indexes / platforms to handle architecture - packages published to OCI with this version of Zarf will be placed within an index and won't be able to be pulled with older versions - old packages will still be able to be pulled however.
• Component and package names can no longer start with a leading - as this is used within the deselect syntax introduced for --components

Features

    

• Add zarf dev deploy for quickly testing packages and restructure zarf prepare into zarf dev by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2170
• Introduce unpinned resources (images/repos/files) warning for zarf dev lint by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2171
• Add glob selection and deselection support to --components by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2175
• Switch to indexed platforms for OCI architectures (eliminate -amd64, -arm64 tag mangling) by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2184

Rollup From v0.31 Patch Releases

• Introduce zarf prepare lint to perform schema validation and lay groundwork for standardizing best practices by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2075
• Add zarf package remove/inspect completion for package names from cluster sources by @WeaponX314 in https://github.com/defenseunicorns/zarf/pull/2151
• Add a warning when no components are selected for deployment in a package by @bdw617 in https://github.com/defenseunicorns/zarf/pull/2167
• Allow passing additional arguments to k9s when invoked by zarf tools monitor by @WeaponX314 in https://github.com/defenseunicorns/zarf/pull/2095
• Add REGISTRY_CA_BUNDLE variable to registry package and chart to improve S3 backed registries by @AbrohamLincoln in https://github.com/defenseunicorns/zarf/pull/2008
• Add GIT_SERVER_DISABLE_REGISTRATION variable to allow for Gitea registration, so that SSO can be used by @dgershman in https://github.com/defenseunicorns/zarf/pull/2118
• [Library Only] Initial implementation of Helm Chart overrides at deploy time by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2131

Fixes

• Update error message when the image doesn't exist locally or on a remote by @bdw617 in https://github.com/defenseunicorns/zarf/pull/2160
• Corrected k8s / helm k8s client version within Helm templating by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2197
• Properly handle tunnel error channels to force retries of image pushing by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2190

Rollup From v0.31 Patch Releases

• Fix helm chart clobbering and differences with Zarf and Helm chart names along with new repoName key by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2174
• Add message asking if the user has init'ed their cluster and slim down error messages more generally by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2177
• Fix compose dropping the only.localOS filter from the composed package by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2173
• Improve Helm rollback logic, messaging, and support for local tarballs by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2157
• Add warnings to better log the errors encountered on image push retries by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2147
• Make set -e (and $ErrorActionPreference = 'Stop';) the default for multiline actions so that they fail correctly by @UncleGedd in https://github.com/defenseunicorns/zarf/pull/2148
• Properly handle variable and constant merging when using composable components by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2129
• Use the node name instead of the hostname label to build the injector pod by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2119
• Resolve pathing issues while loading images with Zarf on Windows by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2106
• Add an error channel for progress bar rendering to properly stop the progress bar when used as a library by @UncleGedd in https://github.com/defenseunicorns/zarf/pull/2117
• Keep a useable empty dir volume within the registry even when persistence is disabled by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2124

Docs

Rollup From v0.31 Patch Releases

• Update the Airgap Software Delivery course name by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2172
• Promote the Quick Start section to Getting Started by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2182
• Fix link and content issues across the docs by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2168
• Improve the docs for zarf tools k9s options and other command examples by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2132
• Update the Zarf overview to be more clear about how Zarf works by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2122

Dependencies

• Update gitea chart from 8.3.0 to 10.0.0 by @TristanHoladay in https://github.com/defenseunicorns/zarf/pull/2123
• Update module golang.org/x/crypto to v0.17.0 [security] by @renovate in https://github.com/defenseunicorns/zarf/pull/2201
• Update sigstore/cosign-installer action to v3 by @renovate in https://github.com/defenseunicorns/zarf/pull/1400
• Update github.com/anchore/stereoscope digest to 4b999b7 by @renovate in https://github.com/defenseunicorns/zarf/pull/2198
• Update dependency pepr to v20 by @renovate in https://github.com/defenseunicorns/zarf/pull/2193
• Update actions/download-artifact action to v4 by @renovate in https://github.com/defenseunicorns/zarf/pull/2194

Rollup From v0.31 Patch Releases

• Update actions/setup-go action to v5 by @renovate in https://github.com/defenseunicorns/zarf/pull/2179
• Update all non-major dependencies by @renovate in https://github.com/defenseunicorns/zarf/pull/2099
• Update github.com/anchore/clio digest to 767f622 by @renovate in https://github.com/defenseunicorns/zarf/pull/2186
• Update component-webhooks example to use new Pepr k8s fluent client by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2090
• Update k8s.io/utils digest to cf03d44 then to b307cd5 by @renovate in https://github.com/defenseunicorns/zarf/pull/2156 and https://github.com/defenseunicorns/zarf/pull/2161
• Update github.com/anchore/stereoscope digest to 3610f4e by @renovate in https://github.com/defenseunicorns/zarf/pull/2155
• [security] Update module github.com/sigstore/cosign/v2 to v2.2.1 by @renovate in https://github.com/defenseunicorns/zarf/pull/2134

Development

• Update the release workflow to accept sigstore terms and sign by digest by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2204 and https://github.com/defenseunicorns/zarf/pull/2205
• Update references to new ironbank credentials in bigbang workflow by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2192

Rollup From v0.31 Patch Releases

• Move the cluster library from internal to pkg to make it available to consumers by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2162
• Promote @lucasrod16 to be a full maintainer by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2166
• Fix race condition in TestValidateLastNonBreakingVersion unit test by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2138
• Split up the e2e tests that need a cluster, versus ones that do not to speed up CI by @bdw617 in https://github.com/defenseunicorns/zarf/pull/2139
• Update external tests to run in a unique k3d cluster and use the same Gitea chart as Zarf by @bdw617 in https://github.com/defenseunicorns/zarf/pull/2145

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.31.4...v0.32.0

What's Changed

• feat: add zarf dev deploy for quickly testing packages and restructure zarf prepare by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2170
• fix: update error message when the image doesn't exist locally or on a remote by @bdw617 in https://github.com/defenseunicorns/zarf/pull/2160
• fix: updated k8s / helm k8s version by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2197
• fix: properly handle the tunnel error channel to retry image pushing by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2190
• chore(deps): update github.com/anchore/stereoscope digest to 4b999b7 by @renovate in https://github.com/defenseunicorns/zarf/pull/2198
• chore(deps): update dependency pepr to v20 by @renovate in https://github.com/defenseunicorns/zarf/pull/2193
• chore(deps): update actions/download-artifact action to v4 by @renovate in https://github.com/defenseunicorns/zarf/pull/2194
• chore: update references to new ironbank credentials in bigbang workflow by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2192

Full Changelog: https://github.com/defenseunicorns/zarf/compare/v0.31.4...v0.32.0-rc1