chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
awscli	patch	2.13.23 -> 2.13.24
defenseunicorns/build-harness	patch	1.12.0 -> 1.12.1
defenseunicorns/zarf	minor	0.29.2 -> 0.30.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-cli (awscli)

v2.13.24

Compare Source

defenseunicorns/build-harness (defenseunicorns/build-harness)

v1.12.1

Compare Source

Miscellaneous Chores

• deps: update all dependencies (#​112) (43f138f)

defenseunicorns/zarf (defenseunicorns/zarf)

v0.30.0

Compare Source

What's Changed

⚠️ Breaking Changes

• Due to the changes needed for image SHASUM parsing, newly built Zarf packages that contain images without a domain (i.e. from docker.io) will not work with older versions of Zarf (old packages are still forward compatible)
• There have been many under-the-hood changes for library users to implement package sources, layouts, command prefixes and more that will require changes to integrate with.

Deprecations

• Component Choice (the component group key) has been deprecated after gathering user feedback - it is recommended to migrate to composable components or another mechanism to build configurable packages.
• The Zarf Web UI has been deprecated within the Zarf binary itself (zarf dev ui) and will be moved to a new project Zarf UI. This will allow the UI to have it's own lifecycle / direction outside of Zarf core.

Features

• Initial implementation of regex pattern validation for variables by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2016
• Allow SHASUM references to be parsed and present under images by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2028
• [alpha] Add support for in-cluster package webhooks via Pepr by @​YrrepNoj and @​lucasrod16 in https://github.com/defenseunicorns/zarf/pull/1899

Rollup From v0.29 Patch Releases

• Introduce a zarf package mirror-resources command to pull resources from a package without initing or deploying by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/1913
• Introduce files.extractPath support to pull files directly from archives by @​cmwylie19 in https://github.com/defenseunicorns/zarf/pull/1962
• Add extra environment variables and PVC enable variables to the Zarf Registry Chart by @​AbrohamLincoln in https://github.com/defenseunicorns/zarf/pull/1994
• Include the helm repo / helm dependency commands in Zarf and tweak helm build logic by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/1991
• Implement chart/manifest merging by name within composable packages by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/1975

Fixes

• Fix idiosyncrasies with where certain package sources can be used by @​Noxsios in https://github.com/defenseunicorns/zarf/pull/1977
• Adjust timeout messaging for actions to be more correct on timeout errors with 0 retries by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2012
• Add a hint when a Helm Release might be empty when using the Big Bang extension by @​dgershman in https://github.com/defenseunicorns/zarf/pull/2003
• Remove the image manifest check from find successors to better support other manifest types by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2018
• Properly return an error after processing all charts if any of them failed during image discovery by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2038
• Fix publish of component tarballs when directories are unarchived by @​Noxsios in https://github.com/defenseunicorns/zarf/pull/2046
• Publish / pull user experience improvements and minor fixes by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2047

Rollup From v0.29 Patch Releases

• Resolve edge cases with --tmpdir behavior not being followed correctly by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2000
• Throw warning instead of error when last non-breaking version is checked with the default CLIVersion by @​lucasrod16 in https://github.com/defenseunicorns/zarf/pull/1981
• Ensure that image manifests inside a Zarf package are pulled as blobs by @​UncleGedd in https://github.com/defenseunicorns/zarf/pull/1987
• Copy global Kubernetes label variables to prevent leakage in library scenarios by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/1992
• Fix potential for double transform of image references (i.e with operators that self-reference) by @​cmwylie19 in https://github.com/defenseunicorns/zarf/pull/1989

Documentation

• Update the bundle ADR to express its migration to uds-cli by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2031
• Officially deprecate component group and add messaging to CLI + docs by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2032
• Refine the documentation for Kubernetes manifests in Zarf by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2039

Rollup From v0.29 Patch Releases

• Update the FAQ page with more content by @​Madeline-UX in https://github.com/defenseunicorns/zarf/pull/2001
• Update the README with additional and more consistent content by @​Madeline-UX in https://github.com/defenseunicorns/zarf/pull/2002

Dependencies

• Update github.com/anchore/stereoscope digest to bf05af5 by @​renovate in https://github.com/defenseunicorns/zarf/pull/1986
• Update aws-actions/configure-aws-credentials action to v4 by @​renovate in https://github.com/defenseunicorns/zarf/pull/2011
• Update actions/checkout action to v4 by @​renovate in https://github.com/defenseunicorns/zarf/pull/2006
• Update docker/login-action action to v3 by @​renovate in https://github.com/defenseunicorns/zarf/pull/2013
• Update all non-major dependencies by @​renovate in https://github.com/defenseunicorns/zarf/pull/1961
• Update docker/setup-buildx-action action to v3 by @​renovate in https://github.com/defenseunicorns/zarf/pull/2017
• Upgrade to cosign v2 and be more clear on the deprecation of sget:// by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2023
• Update goreleaser/goreleaser-action action to v5 by @​renovate in https://github.com/defenseunicorns/zarf/pull/2010
• Update sigstore/cosign-installer digest to c85d0e2 by @​renovate in https://github.com/defenseunicorns/zarf/pull/1783

Development

• Refactor image pulling to use goroutines for concurrency by @​corang in https://github.com/defenseunicorns/zarf/pull/1868
• Properly teardown the EKS cluster in the nightly workflow and update eksctl version by @​lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2014
• Update codeowners with recent team changes by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2048
• Move the service find port function into library code by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2049
• Decouple the agent image build process in Zarf-repository-specific Makefile by @​dgershman in https://github.com/defenseunicorns/zarf/pull/2025
• Normalize Zarf command handling throughout Zarf by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2050
• Add Zarf command prefix understanding to IsVendorCmd by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2052
• Refactor and standardize the package loading process w/provider pattern by @​Noxsios in https://github.com/defenseunicorns/zarf/pull/1977
• Mark the Zarf UI as [Deprecated] and update tunnel logic for library use by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2042
• Cleanup files in release workflow to reduce disk pressure by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/2045

Rollup From v0.29 Patch Releases

• Update the EKS version to support Argo CD in nightly tests by @​Racer159 in https://github.com/defenseunicorns/zarf/pull/1978
• Publish the Zarf init package + init skeleton as OCI on release by @​Noxsios in https://github.com/defenseunicorns/zarf/pull/1990

Full Changelog: zarf-dev/zarf@v0.30.0-rc2...v0.30.0

---

Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.