v0.30.0

What's Changed

⚠️ Breaking Changes

• Due to the changes needed for image SHASUM parsing, newly built Zarf packages that contain images without a domain (i.e. from docker.io) will not work with older versions of Zarf (old packages are still forward compatible)
• There have been many under-the-hood changes for library users to implement package sources, layouts, command prefixes and more that will require changes to integrate with.

Deprecations

• Component Choice (the component group key) has been deprecated after gathering user feedback - it is recommended to migrate to composable components or another mechanism to build configurable packages.
• The Zarf Web UI has been deprecated within the Zarf binary itself (zarf dev ui) and will be moved to a new project Zarf UI. This will allow the UI to have it's own lifecycle / direction outside of Zarf core.

Features

• Initial implementation of regex pattern validation for variables by @Racer159 in #2016
• Allow SHASUM references to be parsed and present under images by @Racer159 in #2028
• [alpha] Add support for in-cluster package webhooks via Pepr by @YrrepNoj and @lucasrod16 in #1899

Rollup From v0.29 Patch Releases

• Introduce a zarf package mirror-resources command to pull resources from a package without initing or deploying by @Racer159 in #1913
• Introduce files.extractPath support to pull files directly from archives by @cmwylie19 in #1962
• Add extra environment variables and PVC enable variables to the Zarf Registry Chart by @AbrohamLincoln in #1994
• Include the helm repo / helm dependency commands in Zarf and tweak helm build logic by @Racer159 in #1991
• Implement chart/manifest merging by name within composable packages by @Racer159 in #1975

Fixes

• Fix idiosyncrasies with where certain package sources can be used by @Noxsios in #1977
• Adjust timeout messaging for actions to be more correct on timeout errors with 0 retries by @Racer159 in #2012
• Add a hint when a Helm Release might be empty when using the Big Bang extension by @dgershman in #2003
• Remove the image manifest check from find successors to better support other manifest types by @Racer159 in #2018
• Properly return an error after processing all charts if any of them failed during image discovery by @Racer159 in #2038
• Fix publish of component tarballs when directories are unarchived by @Noxsios in #2046
• Publish / pull user experience improvements and minor fixes by @Racer159 in #2047

Rollup From v0.29 Patch Releases

• Resolve edge cases with --tmpdir behavior not being followed correctly by @Racer159 in #2000
• Throw warning instead of error when last non-breaking version is checked with the default CLIVersion by @lucasrod16 in #1981
• Ensure that image manifests inside a Zarf package are pulled as blobs by @UncleGedd in #1987
• Copy global Kubernetes label variables to prevent leakage in library scenarios by @Racer159 in #1992
• Fix potential for double transform of image references (i.e with operators that self-reference) by @cmwylie19 in #1989

Documentation

• Update the bundle ADR to express its migration to uds-cli by @Racer159 in #2031
• Officially deprecate component group and add messaging to CLI + docs by @Racer159 in #2032
• Refine the documentation for Kubernetes manifests in Zarf by @Racer159 in #2039

Rollup From v0.29 Patch Releases

• Update the FAQ page with more content by @Madeline-UX in #2001
• Update the README with additional and more consistent content by @Madeline-UX in #2002

Dependencies

• Update github.com/anchore/stereoscope digest to bf05af5 by @renovate in #1986
• Update aws-actions/configure-aws-credentials action to v4 by @renovate in #2011
• Update actions/checkout action to v4 by @renovate in #2006
• Update docker/login-action action to v3 by @renovate in #2013
• Update all non-major dependencies by @renovate in #1961
• Update docker/setup-buildx-action action to v3 by @renovate in #2017
• Upgrade to cosign v2 and be more clear on the deprecation of sget:// by @Racer159 in #2023
• Update goreleaser/goreleaser-action action to v5 by @renovate in #2010
• Update sigstore/cosign-installer digest to c85d0e2 by @renovate in #1783

Development

• Refactor image pulling to use goroutines for concurrency by @corang in #1868
• Properly teardown the EKS cluster in the nightly workflow and update eksctl version by @lucasrod16 in #2014
• Update codeowners with recent team changes by @Racer159 in #2048
• Move the service find port function into library code by @Racer159 in #2049
• Decouple the agent image build process in Zarf-repository-specific Makefile by @dgershman in #2025
• Normalize Zarf command handling throughout Zarf by @Racer159 in #2050
• Add Zarf command prefix understanding to IsVendorCmd by @Racer159 in #2052
• Refactor and standardize the package loading process w/provider pattern by @Noxsios in #1977
• Mark the Zarf UI as [Deprecated] and update tunnel logic for library use by @Racer159 in #2042
• Cleanup files in release workflow to reduce disk pressure by @Racer159 in #2045

Rollup From v0.29 Patch Releases

• Update the EKS version to support Argo CD in nightly tests by @Racer159 in #1978
• Publish the Zarf init package + init skeleton as OCI on release by @Noxsios in #1990

Full Changelog: v0.30.0-rc2...v0.30.0

v0.30.0-rc2

What's Changed

• fix: publish not publishing component tarballs by @Noxsios in #2046
• fix: publish / pull UX improvement and minor fixes by @Racer159 in #2047
• chore: update codeowners by @Racer159 in #2048
• chore: move find port function into library code by @Racer159 in #2049
• chore(deps): update goreleaser/goreleaser-action action to v5 by @renovate in #2010
• chore(deps): update sigstore/cosign-installer digest to c85d0e2 by @renovate in #1783

Full Changelog: v0.30.0-rc1...v0.30.0-rc2

v0.30.0-rc1

Known Issues

• zarf init or zarf tools download-init pulling of the Zarf init package fails on this version - use the following curl command as a workaround (replacing amd64 with arm64 as required):

curl -L https://github.com/defenseunicorns/zarf/releases/download/v0.30.0-rc1/zarf-init-amd64-v0.30.0-rc1.tar.zst -O ~/.zarf-cache/zarf-init-amd64-v0.30.0-rc1.tar.zst

What's Changed

• feat: initial implementation of pattern by @Racer159 in #2016
• feat: allow shasums to be present in images by @Racer159 in #2028
• feat: in cluster package webhooks via Pepr (alpha) by @YrrepNoj in #1899
• fix: EKS cluster teardown in nightly workflow and update eksctl version by @lucasrod16 in #2014
• fix: adjust timeout messaging to be more correct on timeout errors with 0 retries by @Racer159 in #2012
• fix: adds a hint when the release might be empty by @dgershman in #2003
• fix: remove the image manifest check from find successors by @Racer159 in #2018
• fix: refactor image pulling to use goroutines for concurrency by @corang in #1868
• fix: return an error after processing all charts if any of them failed during image discovery by @Racer159 in #2038
• chore(deps): update github.com/anchore/stereoscope digest to bf05af5 by @renovate in #1986
• chore(deps): update aws-actions/configure-aws-credentials action to v4 by @renovate in #2011
• chore(deps): update actions/checkout action to v4 by @renovate in #2006
• chore(deps): update docker/login-action action to v3 by @renovate in #2013
• chore(deps): update all non-major dependencies by @renovate in #1961
• chore(deps): update docker/setup-buildx-action action to v3 by @renovate in #2017
• chore(deps): upgrade to cosign v2 and be more clear on the deprecation of sget:// by @Racer159 in #2023
• chore: update the bundle adr to express its migration to uds-cli by @Racer159 in #2031
• chore: officially deprecate component group and add messaging to CLI + docs by @Racer159 in #2032
• chore: refine the documentation for manifests by @Racer159 in #2039
• chore: refactor package loading process w provider pattern (the real MZAL) by @Noxsios in #1977
• chore: mark the Zarf UI as [Deprecated] and update tunnel logic for library use by @Racer159 in #2042
• chore: cleanup files in release workflow by @Racer159 in #2045

Full Changelog: v0.29.2...v0.30.0-rc1

v0.29.2

What's Changed

Features

• Introduce a zarf package mirror-resources command to pull resources from a package without initing or deploying by @Racer159 in #1913

⚠️ Note: This command currently only supports images and git repositories - Helm chart support requires OCI mirroring which is being workedin #2005

Fixes

• Resolve edge cases with --tmpdir behavior not being followed correctly by @Racer159 in #2000

Documentation

• Update the FAQ page with more content by @Madeline-UX in #2001
• Update the README with additional and more consistent content by @Madeline-UX in #2002

Full Changelog: v0.29.1...v0.29.2

v0.29.1

What's Changed

Features

• Introduce files.extractPath support to pull files directly from archives by @cmwylie19 in #1962
• Add extra environment variables and PVC enable variables to the Zarf Registry Chart by @AbrohamLincoln in #1994
• Include the helm repo / helm dependency commands in Zarf and tweak helm build logic by @Racer159 in #1991
• Implement chart/manifest merging by name within composable packages by @Racer159 in #1975

Fixes

• Throw warning instead of error when last non-breaking version is checked with the default CLIVersion by @lucasrod16 in #1981
• Ensure that image manifests inside a Zarf package are pulled as blobs by @UncleGedd in #1987
• Copy global Kubernetes label variables to prevent leakage in library scenarios by @Racer159 in #1992
• Fix potential for double transform of image references (i.e with operators that self-reference) by @cmwylie19 in #1989

Development

• Update the EKS version to support Argo CD in nightly tests by @Racer159 in #1978
• Publish the Zarf init package + init skeleton as OCI on release by @Noxsios in #1990

New Contributors

• @AbrohamLincoln made their first contribution in #1994

Full Changelog: v0.29.0...v0.29.1

v0.29.0

What's Changed

Features

    

• Add support for mutating repository information in ArgoCD Application CRDs and Repositories by @dgershman in #1875
• Introduce zarf tools update-creds to roll credentials for Zarf managed git, registry and artifact services by @Racer159 in #1898
• Introduce zarf tools registry prune to cleanup old images not referenced by currently deployed Zarf packages by @Racer159 in #1966
• Add the --no-color option to disable ANSI color code output by @caesarshift in #1889

Rollup From v0.28 Patch Releases

• Add Zarf Agent support for Prometheus Metrics by @cmwylie19 in #1915
• Support --output on zarf version to return more detailed version information by @Noxsios in #1916
• Introduce backwards compatibility validation on package deploy by @lucasrod16 in #1909
• Add a template for ###ZARF_COMPONENT_NAME### to be used during component import by @cmwylie19 in #1923
• Add additional flux patch override support to the Big Bang extension by @Racer159 in #1910
• Add the ability to specify Zarf variables as filepaths by @Racer159 in #1906
• Add support for appending @ git refs to Helm chart git URLs by @cmwylie19 in #1892
• Add support for building chart sub-dependencies by @cmwylie19 in #1892
• Add jsonpath support to wait actions and zarf tools wait-for by @cmwylie19 in #1873
• Add support for named ports on Services in zarf connect by @cmwylie19 in #1894
• Enable more key managers for signing packages with cosign by @YrrepNoj in #1879
• Allow for zarf crane pulls and zarf crane pushes without an explicit tunnel or auth for internal registries by @dgershman in #1851
• Add only filter support and full init package support to zarf package remove by @Racer159 in #1855
• Add source file info to SBOM viewer to better track nested files and dataInjections by @Racer159 in #1865
• Add package version to the zarf package list output by @YrrepNoj in #1858

Fixes

• Change to podAntiAffinity when using the ReadWriteMany access mode for the registry to assist with rolling K8s Nodes by @Racer159 in #1898
• No longer rotate credentials on zarf init to assist with disaster recovery where a re-init is required @Racer159 in #1898
• Update Big Bang extension Flux GitRepository API version to remove deprecation warning by @mjnagel in #1933
• Fix deploying packages w/no explicit component contents (i.e. actions only) by @Noxsios in #1973

Rollup From v0.28 Patch Releases

• Use UID and GID for USER in Dockerfile instead of a named user by @flickerfly in #1922
• Fix the error return for building helm dependencies by @Racer159 in #1911
• Fix a bug with registry push/pull on detected but invalid clusters by @Racer159 in #1930
• Fix simple repos causing an 'Already Up to Date' error by @Racer159 in #1942
• Fix registry injector failures for generic images (i.e. the one from Iron Bank) by @Racer159 in #1896
• Properly catch user interrupts when using Zarf commands by @caesarshift in #1891
• Correctly create all namespaces when in YOLO mode by @YrrepNoj in #1878
• Only verify authentication to registry if creds exist and better handle registry scopes by @Noxsios in #1893
• Fix inclusion of empty files on package creation by @YrrepNoj in #1860
• Fix inline-oci:// create + publish using --output on zarf package create by @Noxsios in #1857
• Better detection of when to create state in custom init packages without the zaf-seed-registry by @Racer159 in #1855

Docs

• Refactor docs paths, standardize admonition syntax and in preparation for Hugo move by @bdfinst in #1944, #1947 and #1948

Rollup From v0.28 Patch Releases

• Improve Config File documentation by @cmwylie19 in #1912
• Fix grammar within the k8s types package by @cmwylie19 in #1937
• Update Git example to reference the Flux example instead of having it's own explanation by @cmwylie19 in #1935
• Update the Zarf definition of Generally Available ADR to be more clear by @Madeline-UX in #1905
• Fix rendering of the local file and manifests examples by @Racer159 in #1874

Dependencies

• Update all non-major dependencies by @renovate in #1866
• Update typescript-eslint monorepo to v6 (major) by @renovate in #1955
• Update dependency nodemon to v3 by @renovate in #1951
• Update dependency eslint-config-prettier to v9 by @renovate in #1950

Rollup From v0.28 Patch Releases

• Update dependency prettier to v3 by @renovate in #1880
• Update github.com/anchore/stereoscope digest to d1f3d76 by @renovate in #1919
• Update github.com/anchore/stereoscope digest to cd49355 by @renovate in #1680
• Update aws-actions/configure-aws-credentials digest to 5fd3084 by @renovate in #1825
• Update module github.com/fluxcd/source-controller/api to v1 by @renovate in #1877
• Update Terraform aws module in the variables example to v5 by @renovate in #1850
• Update svelte to v4 for deployment web UI by @renovate in #1840
• Update all non-major dependencies by @renovate in #1790

Development

• Refactor utils.DoHostnamesMatch to be more usable as a library by @cmwylie19 in #1953
• Reduce test disk usage and normalize git tests by @Racer159 in #1958 and #1967
• Add copy commands to the example package publish workflow to allow for uname -m by @Racer159 in #1959
• Add unit tests for validatePackageArchitecture() method by @lucasrod16 in #1957
• Add a text section to the slack json that notifies of nightly test failures by @Racer159 in #1964
• Disable grafana in the ...

v0.28.4

What's Changed

Features

• Add Zarf Agent support for Prometheus Metrics by @cmwylie19 in #1915
• Support --output on zarf version to return more detailed version information by @Noxsios in #1916
• Introduce backwards compatibility validation on package deploy by @lucasrod16 in #1909
• Add a template for ###ZARF_COMPONENT_NAME### to be used during component import by @cmwylie19 in #1923

Fixes

• Use UID and GID for USER in Dockerfile instead of a named user by @flickerfly in #1922
• Fix the error return for building helm dependencies by @Racer159 in #1911
• Fix a bug with registry push/pull on detected but invalid clusters by @Racer159 in #1930
• Fix simple repos causing an 'Already Up to Date' error by @Racer159 in #1942

Docs

• Improve Config File documentation by @cmwylie19 in #1912
• Fix grammar within the k8s types package by @cmwylie19 in #1937
• Update Git example to reference the Flux example instead of having it's own explanation by @cmwylie19 in #1935

Dependencies

• Update dependency prettier to v3 by @renovate in #1880
• Update github.com/anchore/stereoscope digest to d1f3d76 by @renovate in #1919

Developement

• Add a pending ADR for how to maintain the Zarf transform code for a Pepr Zarf Agent by @cmwylie19 in #1900
• Introduce a workflow for publishing an example application package as OCI to GHCR by @YrrepNoj in #1856 and #1926
• Update CODEOWNERS to replace @YrrepNoj with @cmwylie19 by @Racer159 in #1924
• Return images as an array of strings for all components in packager.FindImages by @cmwylie19 in #1927
• Add a slack webhook that triggers when nightly tests fail by @Racer159 in #1941
• Allow for the injector to be built in docker and uploaded to S3 by @Racer159 in #1917

New Contributors

• @flickerfly made their first contribution in #1922

Full Changelog: v0.28.3...v0.28.4

v0.28.3

What's Changed

Features

• Add additional flux patch override support to the Big Bang extension by @Racer159 in #1910
• Add the ability to specify Zarf variables as filepaths by @Racer159 in #1906

Fixes

• Fix registry injector failures for generic images (i.e. the one from Iron Bank) by @Racer159 in #1896

Docs

• Update the Zarf definition of Generally Available ADR to be more clear by @Madeline-UX in #1905

Full Changelog: v0.28.2...v0.28.3

v0.28.2

What's Changed

Features

• Add support for appending @ git refs to Helm chart git URLs by @cmwylie19 in #1892
• Add support for building chart sub-dependencies by @cmwylie19 in #1892
• Add jsonpath support to wait actions and zarf tools wait-for by @cmwylie19 in #1873
• Add support for named ports on Services in zarf connect by @cmwylie19 in #1894
• Enable more key managers for signing packages with cosign by @YrrepNoj in #1879

Fixes

• Properly catch user interrupts when using Zarf commands by @caesarshift in #1891
• Correctly create all namespaces when in YOLO mode by @YrrepNoj in #1878
• Only verify authentication to registry if creds exist and better handle registry scopes by @Noxsios in #1893

Dependencies

• Update github.com/anchore/stereoscope digest to cd49355 by @renovate in #1680
• Update aws-actions/configure-aws-credentials digest to 5fd3084 by @renovate in #1825
• Update module github.com/fluxcd/source-controller/api to v1 by @renovate in #1877

Development

• Reduce the size of the transform package for easier reuse as a library by @cmwylie19 in #1883
• Create Pending zarf bundle ADR to start work on multi-package orchestration by @Noxsios in #1820
• Create Pending Zarf hooks ADR to start work on handling environment prerequisites for components by @YrrepNoj in #1813
• Refactor large workflows into multiple jobs and fix the release workflow by @Racer159 in #1901, #1902, and #1903

New Contributors

• @caesarshift made their first contribution in #1891

Full Changelog: v0.28.1...v0.28.2

v0.28.1

What's Changed

Features

• Allow for zarf crane pulls and zarf crane pushes without an explicit tunnel or auth for internal registries by @dgershman in #1851
• Add only filter support and full init package support to zarf package remove by @Racer159 in #1855
• Add source file info to SBOM viewer to better track nested files and dataInjections by @Racer159 in #1865
• Add package version to the zarf package list output by @YrrepNoj in #1858

Fixes

• Fix inclusion of empty files on package creation by @YrrepNoj in #1860
• Fix inline-oci:// create + publish using --output on zarf package create by @Noxsios in #1857
• Better detection of when to create state in custom init packages without the zaf-seed-registry by @Racer159 in #1855

Docs

• Fix rendering of the local file and manifests examples by @Racer159 in #1874

Dependencies

• Update Terraform aws module in the variables example to v5 by @renovate in #1850
• Update svelte to v4 for deployment web UI by @renovate in #1840
• Update all non-major dependencies by @renovate in #1790

Full Changelog: v0.28.0...v0.28.1