v0.23.0-rc1

What's Changed

• Fix JSON schema for zarf.yaml by @corang in #927
• GH Pipeline Cleanup & Move to Distroless + GHCR by @jeff-mccoy in #913
• Pin dependency playwright to 1.27.1 by @renovate in #933
• Remove files properly on generate cli docs and check errors by @Racer159 in #943
• change enable --now to enable and start by @Racer159 in #953
• Bring the small fixes from the proxy pr into their own pr by @Racer159 in #961
• Use a regex manager to look at zarf.yamls and PR for their helm charts by @Racer159 in #963
• Doc: Updated typos on the 0-zarf-overview.md page. by @TheFutonEng in #974
• #986. Bump unicorn-ui to v0.0.21. by @mike-winberry in #994
• Fix typo on header for core concepts doc by @mjnagel in #1000
• Remove stage 2 and replace w/ a static docker registry implementation in rust by @Noxsios in #948
• Create SECURITY.md by @jeff-mccoy in #1001
• Run CVE check when deps change + nightly by @jeff-mccoy in #1011
• Add versions to filenames if they exist by @Racer159 in #971
• fix: update schema validation url in docs (#1052) by @andrewsgreene in #1053
• remove typo character in example command within the postgres readme by @YrrepNoj in #1058
• Make Zarf a Library by @jeff-mccoy in #934
• Fix UI failing silently if init package is not found by @Noxsios in #1014
• Allow e2e tests to run back to back by @Racer159 in #1072
• Add nightly snapshot release by @jeff-mccoy in #1082
• 69 dependency updates by @renovate

New Contributors

• @TheFutonEng made their first contribution in #974
• @mjnagel made their first contribution in #1000

Full Changelog: v0.22.2...v0.23.0-rc1

v0.22.2

What's Changed

• Update kubernetes packages to v0.25.3 by @renovate in #910
• Fixes #893 Deploying steps indexing. by @mike-winberry in #907
• Update dependency svelte to v3.52.0 by @renovate in #912
• Add a generate PKI command by @Racer159 in #917
• Update module github.com/anchore/syft to v0.59.0 by @renovate in #916
• Update module github.com/sigstore/cosign to v1.13.1 by @renovate in #918
• Update typescript-eslint monorepo to v5.40.1 by @renovate in #919
• 920 viper package deploy variables do not work by @Racer159 in #921
• Update module github.com/derailed/k9s to v0.26.7 by @renovate in #928
• Update sigstore/cosign-installer action to v2.8.1 by @renovate in #930

Full Changelog: v0.22.1...v0.22.2

v0.22.1

What's Changed

• Update dependency vite to v3.1.8 by @renovate in #899
• Fix the double ui build issues by @Racer159 in #894
• fix init pkg deploy via ui by @Noxsios in #900
• Update dependency @defense-unicorns/unicorn-ui to v0.0.18 by @renovate in #902
• Ensure a target directory exists prior to downloading files by @jeff-mccoy in #909
• VS Code schema validation by @Noxsios in #884

Full Changelog: v0.22.0...v0.22.1

v0.22.0

Release Overview

https://youtu.be/p1LFTbNHzhU

⚠️ Breaking changes

• Zarf init package names now include the CLI version, e.g. zarf-init-amd64.tar.zst -> zarf-init-amd64-v0.22.0.tar.zst
• Internal images and git repos have a CRC32 suffix in the name to avoid collisions
• The zarf-state secret structure has been updated to contain more configuration natively instead of holding a single 'secret' value that all others were derived from.

Features

• Support for external OCI registry and external git server by @YrrepNoj in #754, #876
• Zarf Web UI MVP (experimental) by @jeff-mccoy, @YrrepNoj, @Noxsios and @mike-winberry in #727
• Support native Windows binaries by @Noxsios in #832
• Zarf config file support using Viper by @jeff-mccoy in #781
• Add ability to list deployed zarf packages and remove individual packages by @YrrepNoj and @Noxsios in #736, #814
• Add support for git commit hashes by @Racer159 in #755
• Make init package idempotent by @jeff-mccoy in #751
• Support git repo caching on package create by @Racer159 in #785
• Add noWait field to yaml for manifests and charts by @corang in #816
• Support local helm charts for package creation by @corang in #837
• Add a description field for zarf variable / constant declarations by @jeff-mccoy in #844
• Version control init pkg and use zarf cache by @jeff-mccoy in #895

Fixes

• Fix bugs with package remove by @Racer159 in #761
• Fix the k3s Unit File on older Systemd by @Racer159 in #790
• Update button style to match design. by @mike-winberry in #796
• Tmpdir flag silently fails when not a real directory by @Noxsios in #775
• Fix the connect command usage info by @Racer159 in #819
• Make the corruption error more clear and fix zarf tools cache-clear by @Racer159 in #852
• Fix agent mutation of new registry by @Racer159 in #845
• UI Typography/Layout Fixes. by @mike-winberry in #826

Development

• Check for CVEs with Grype in actions by @Racer159 in #744
• Pull out docs and schema refactor from PR 692 by @Racer159 in #730
• speed up patch merging for renovate by @jeff-mccoy in #780
• Add package.json and package-lock.json to exclusions for CLI tests by @Racer159 in #811
• Remove repo1 CICD dependency due to unreliable uptime by @jeff-mccoy in #817
• Fixup Makefile help and Speedup builds by @Racer159 in #847
• Fixing a small issue with the timeout not stopping the external test by @Racer159 in #869

Docs

• fix typo by @decleaver in #786
• Fix docs by @jeff-mccoy in #818
• adds barebones terraform example by @UncleGedd in #857
• Clear up the zarf package create walkthrough by @Racer159 in #870

Dependencies

• Pin dependencies by @renovate in #867
• Update module github.com/anchore/syft to v0.56.0 by @renovate in #729
• Update module github.com/sigstore/cosign to v1.12.0 by @renovate in #732
• Update kubernetes packages to v0.25.1 by @renovate in #741
• Update module github.com/anchore/syft to v0.57.0 by @renovate in #746
• Update golang.org/x/crypto digest to 35f4265 by @renovate in #745
• Update github.com/anchore/stereoscope digest to 5655277 by @renovate in #756
• Update module github.com/sigstore/cosign to v1.12.1 by @renovate in #757
• Update module helm.sh/helm/v3 to v3.10.0 by @renovate in #759
• Update module github.com/derailed/k9s to v0.26.4 by @renovate in #762
• Update actions/cache action to v3 by @renovate in #771
• Update module github.com/derailed/k9s to v0.26.5 by @renovate in #765
• Update kubernetes packages to v0.25.2 by @renovate in #763
• Update k8s.io/utils digest to 665eaae by @renovate in #764
• Update sigstore/cosign-installer action to v2.7.0 by @renovate in #773
• Update golang.org/x/crypto digest to 4ba4fb4 by @renovate in #778
• Update dependency eslint to v8.24.0 by @renovate in #779
• Update Rust crate sha2 to 0.10.6 by @renovate in #709
• Update module github.com/pterm/pterm to v0.12.47 by @renovate in #782
• Pin dependencies by @renovate in #770
• Update dependency prettier-plugin-svelte to v2.7.1 by @renovate in #784
• Update golang.org/x/crypto digest to eccd636 by @renovate in #783
• Update actions/upload-artifact action to v3 by @renovate in #789
• Update dependency svelte-check to v2.9.1 by @renovate in #787
• Update module github.com/derailed/k9s to v0.26.6 by @renovate in #791
• Update dependency vite to v3.1.4 by @renovate in #805
• Update typescript-eslint monorepo to v5.38.1 by @renovate in #788
• Update dependency @playwright/test to v1.26.1 by @renovate in #795
• Update dependency typescript to v4.8.4 by @renovate in #801
• Update dependency @defense-unicorns/unicorn-ui to v0.0.11 by @renovate in #808
• Update module github.com/anchore/syft to v0.58.0 by @renovate in #815
• Update dependency @defense-unicorns/unicorn-ui to v0.0.12 by @renovate in #822
• Update dependency @defense-unicorns/unicorn-ui to v0.0.13 by @renovate in #825
• Update dependency @defense-unicorns/unicorn-ui to v0.0.14 by @renovate in #827
• Update module github.com/pterm/pterm to v0.12.48 by @renovate in #824
• Update dependency yaml to v2.1.2 by @renovate in #828
• Update dependency @defense-unicorns/unicorn-ui to v0.0.16 by @renovate in #831
• Update module github.com/pterm/pterm to v0.12.49 by @renovate in #834
• Update github.com/anchore/stereoscope digest to 1b1b744 by @renovate in #830
• Update typescript-eslint monorepo to v5.39.0 by @renovate in #835
• Update golang.org/x/crypto digest to 4161e89 by @renovate in #840
• Update dependency yaml to v2.1.3 by @renovate in #841
• Update 2-core-concepts.md by @Madeline-UX in #846
• Update dependency @testing-library/svelte to v3.2.2 by @renovate in #850
• Update dependency vite to v3.1.6 by @renovate in #849
• Update github.com/anchore/stereoscope digest to d24c9d6 by @renovate in #859
• Update module github.com/sigstore/cosign to v1.13.0 by @renovate in #863
• Update sigstore/cosign-installer action to v2.8.0 by @renovate in #864
• Update dependency @playwright/test to v1.27.0 by @renovate in #865
• Update dependency eslint to v8.25.0 by @renovate in #866
• Update dependency material-symbols to v0.2.13 by @renovate in #868
• Update dependency vite to v3.1.7 by @renovate in #873
• Update...

v0.21.3

Features

• add flag to show sbom files during a package inspect command by @YrrepNoj in #678
  

Fixes

• Fix typo on destroy by @jeff-mccoy in #688

Docs

• Update readme content by @Racer159 in #672
• Updates to Overview, User guide index, and Understand the basics by @Madeline-UX in #683
• Add Zarf Features to Docs Overview pg. by @Madeline-UX in #632
• Update example READMEs by @Racer159 in #681
• Slice out the first overview page by @Racer159 in #690
• Resolve madeline feedback on examples main page by @Racer159 in #695
• Remove linkedin project link by @Racer159 in #703

Development

• add self-hosted runner code & update for multi-os test support by @jeff-mccoy in #704
• Refactor CI to work on regular github runners + fix PLG support for K8s 1.25 by @jeff-mccoy in #719

Dependencies

• Update module github.com/mattn/go-colorable to v0.1.13 by @renovate in #673
• Update sigstore/cosign-installer action to v2.5.1 by @renovate in #674
• Update module github.com/sigstore/cosign to v1.11.0 by @renovate in #685
• Update kubernetes packages to v0.24.4 by @renovate in #684
• Update golang.org/x/crypto digest to bc19a97 by @renovate in #680
• split minio into own pkg & cleanup/update postgres/minio examples by @jeff-mccoy in #667
• Update golang.org/x/crypto digest to 5757bc0 by @renovate in #693
• Update golang.org/x/crypto digest to c86fa9a by @renovate in #702
• Update module k8s.io/klog/v2 to v2.80.0 by @renovate in #712
• Update module github.com/pterm/pterm to v0.12.46 by @renovate in #714
• Vendor syft/migrate witness -> syft direct by @jeff-mccoy in #716
• Update module github.com/sigstore/cosign to v1.11.1 by @renovate in #694
• Update module helm.sh/helm/v3 to v3.9.4 by @renovate in #696
• Update module github.com/anchore/syft to v0.55.0 by @renovate in #721
• Update kubernetes packages to v0.25.0 by @renovate in #691
• Update module k8s.io/klog/v2 to v2.80.1 by @renovate in #722
• Update module github.com/AlecAivazis/survey/v2 to v2.3.6 by @renovate in #724
• Update sigstore/cosign-installer action to v2.6.0 by @renovate in #726

Full Changelog: v0.21.2...v0.21.3

v0.21.2

What's Changed

• Add error checking to surveys by @Racer159 in #665
• Handle release versions on init in a backwards compatible way by @Racer159 in #663
• Big Bang 1.37 -> 1.39 & Fix K3s LB Zarf Agent Issue by @jeff-mccoy in #668
• Update module helm.sh/helm/v3 to v3.9.3 by @renovate in #669
• Small terminal UI improvements by @jeff-mccoy in #670
• Include kustomizations in manifest count by @jeff-mccoy in #671

Full Changelog: v0.21.1...v0.21.2

v0.21.1

Features

• Add new "prepare" stage for components scripts to perform actions on zarf package create by @jeff-mccoy in #660

  components:
    - name: prepare
      scripts:
        # Note this file will be created in this directory, regardless of where the package create command is called from
        prepare:
          - "touch test-prepare.txt"

Development

• Move to official github action for project issue automation by @renovate in #653

Dependencies

• Update module sigs.k8s.io/kustomize/api to v0.12.1 by @renovate in #656
• Update module github.com/sigstore/cosign to v1.10.1 by @renovate in #659
• Update module go to 1.19 by @renovate in #657
• Update module github.com/derailed/k9s to v0.26.3 by @renovate in #658

Full Changelog: v0.21.0...v0.21.1

v0.21.0

https://www.youtube.com/watch?v=WnOYlFVVKDE

⚠️ Breaking changes

• Move variable declaration from component to package level by @Racer159 in #621
• Remove pod-only data injection targets (now requires container in target) by @jeff-mccoy in #644

Features

• Full Linux ARM support by @jeff-mccoy in #651

• Package create & deploy variable overrides by @Racer159 in #621. This will allow new ways to template a Zarf Package during creation as seen in packages/zarf-agent/zarf.yaml. Additionally, constants and variables expand on the existing variables that existed at the component level and allow users to specify values at package deploy as well as prompt the user if they did not provide a value via a --set flag.

  Various examples found in examples/package-variables

  kind: ZarfPackageConfig
  metadata:
    name: package-variables
    description: "Test component to demonstrate package variables feature"
  
  # Demonstrates injecting custom constants into a K8s resource, e.g. ###ZARF_CONST_DINGO###
  constants:
    - name: "DINGO"
      value: "howl"
  
  # Demonstrates injecting custom variables into a K8s resource, e.g. ###ZARF_VAR_DOG###
  variables:
    - name: "WOLF"
    - name: "DOG"
      default: "woof"
    - name: "CAT"
      prompt: true
    - name: "FOX"
      default: "###ZARF_PKG_VAR_CONFIG_MAP###"
      prompt: true
  
  components:
    # Note that you must specify the ACTION and CONFIG_MAP i.e. `--set ACTION=template --set CONFIG_MAP=simple-configmap.yaml` during package create
    - name: variable-example
      description: "This component will ###ZARF_PKG_VAR_ACTION### variables within ###ZARF_PKG_VAR_CONFIG_MAP### during deploy"
      required: true
      manifests:
        - name: variable-example-configmap
          files:
            - "###ZARF_PKG_VAR_CONFIG_MAP###"

  A user being prompted for variable values on package deploy:
  

• Data injection compression & log output by @jeff-mccoy in #644

    dataInjections:
      # Injection in the root directory using data-loader init container
      - source: sample-data
        target:
          namespace: demo
          selector: app=data-injection
          container: data-loader
          path: /test
        compress: true

Fixes

• Fix Misspellings Across Repository by @elisoncrum in #641
• Fixes some data injection race conditions and stability concerns on larger datasets by @jeff-mccoy in #644

Development

• Always build & test Zarf Agent during pull requests; publish latest Zarf Agent on release by @jeff-mccoy in #651
• Correctly cleanup temp directory test by @jeff-mccoy in #654
• Change from kubectl exec -> kubectl logs for data injection test by @jeff-mccoy in #647

Docs

• Update contributor & testing guides by @jeff-mccoy in #642

Dependencies

• Update module github.com/google/go-containerregistry to v0.11.0 by @renovate in #633
• Update module helm.sh/helm/v3 to v3.9.2 by @renovate in #636
• Update golang.org/x/crypto digest to 630584e by @renovate in #639
• Update module github.com/pterm/pterm to v0.12.45 by @renovate in #637
• Update sigstore/cosign-installer action to v2.5.0 by @renovate in #645
• Update module github.com/sigstore/cosign to v1.10.0 by @renovate in #638
• Update module sigs.k8s.io/kustomize/kyaml to v0.13.8 by @renovate in #649
• Update module github.com/testifysec/go-witness to v0.1.12 by @renovate in #652
• Update module sigs.k8s.io/kustomize/api to v0.12.0 by @renovate in #650

New Contributors

• @elisoncrum made their first contribution in #641

Full Changelog: v0.20.0...v0.21.0

v0.20.0

Video update below:

⚠️ Breaking changes

• Remove shorthand zarf <package>|<zarf.yaml> and require package deploy or package create. Also warn users on attempt to use deprecated commands by @jeff-mccoy in #587 and #628

  Previous Shorthand	New Command
  zarf zarf-package-demo-amd64.tar.zst	zarf package deploy zarf-package-demo-amd64.tar.zst
  zarf zarf.yaml	zarf package create

  

• No longer automatically save git or docker credentials locally to support dynamic port binding by @jeff-mccoy in #586

Features

• Increase image push and git push reliability by adding retry logic and enabling dynamic port binding for tunnels during zarf package deploy operations by @jeff-mccoy in #586
  • This removes the need to reserve specific local ports to use Zarf or experience issues from stalled tunnel connections keeping the port bound
• Add component filtering based on cluster architecture and local operating system on zarf package deploy by @jeff-mccoy in #591
• Add zarf connect list for connect service lookup by @jeff-mccoy in #615
  
• Add tmpdir command flag and refactor CommonOptions by @Racer159 in #600
• Converts E2E tests to user journey tests & adds --no-progress flag for cleaner CI logs by @jeff-mccoy in #581
• Directly open to useful logs in Grafana on zarf connect logging by @jeff-mccoy in #615
  

• Add support for package deploy via cosign sget by @YrrepNoj in #550
  
• Add init package downloader by @jeff-mccoy in #506
  
• Better CLI Help Messages by @YrrepNoj in #505
• Support insecure docker registries during package creation by @jeff-mccoy in #500

  zarf package create --insecure

• Enable Zarf install via Homebrew for Mac and use GoReleaser for GitHub release workflow by @YrrepNoj in #498

  brew tap defenseunicorns/tap
  brew install zarf

• Add helm release name property to zarf chart by @dsmithbauer in #480

  - name: nginx-2
      charts:
      - name: nginx
          namespace: nginx
          url: https://charts.bitnami.com/bitnami
          version: 11.1.5
  
          # custom release name for this helm chart
          releaseName: nginx-2

  examples/helm-with-different-releaseName-values

Fixes

• Update gitea PATCH request to include 'login_name' key by @YrrepNoj in #603
• Refactor composed package logic to handle nested composes by @YrrepNoj in #588
• Fix registry user in credentials output by @rodneyxr in #578
• Fix zarf agent flux mutation by @jeff-mccoy in #572
• Produce better debug messages with JSON encoding instead of byte array dumps by @jeff-mccoy in #511
  

• Fully remove zarf secrets from all namespaces by @jeff-mccoy in #558
• Update target location for ekcstl for Darwin amd64 builds by @YrrepNoj in #516
• Injector stability improvements by @jeff-mccoy in #510

Packages & Examples

• Update bigbang and flux resources to release 1.37.0 by @brandtkeller in #609

• Upgrade K3s package to v1.24.1+k3s1 by @RothAndrew in #543
• fix kustomize path for big-bang core package by @jeff-mccoy in #508
• Golang and Helm chart dependency updates by @jeff-mccoy in #495

Docs

• Migrate https://docs.zarf.dev/ docs into this repo by @YrrepNoj in #590
• Fix dead link on getting started site by @mike-winberry in #596
• Add dashboard docs for sbom and k9s by @YrrepNoj in #598
• Basic Zarf walkthrough documentation by @YrrepNoj in #597
• Update docs and add prereq for zarf-registry by @Racer159 in #605
• RENAME .images folder in packages/big-bang-core by @mike-winberry in #612
• Update contributing.md testing instructions by @Racer159 in #619
• Fix link in docs by @UncleGedd in #623
• Update contrib docs with CONTRIBUTING.md by @Racer159 in #630

• Fixed broken bigbang link in examples README. by @mike-winberry in #547
• Add Homebrew instructions to docs by @ntwkninja in #503

Development

• Generate docs from zarf schema json by @Racer159 in #614
• Ignore non-code changes in CI for PRs to simplify docs updates by @jeff-mccoy in #599

• Configure Renovate by @renovate in #509
• • Fix goreleaser version by @jeff-mccoy in #507
• Update linter to only report new issues by @YrrepNoj in #504
• Add sign-off label to banned labels list to prevent merge by @YrrepNoj in #491
• Hidden tool command for generating docs by @YrrepNoj in #490

Dependencies

• Update module github.com/google/go-containerregistry to v0.10.0 by @renovate in #554
• Update module github.com/stretchr/testify to v1.7.5 by @renovate in #545
• Update module github.com/derailed/k9s to v0.25.20 by @renovate in #571
• Update module github.com/stretchr/testify to v1.8.0 by @renovate in #574
• Update sigstore/cosign-installer action to v2.4.1 by @renovate in #582
• Update golang.org/x/crypto digest to 0559593 by @renovate in #553
• Update module github.com/derailed/k9s to v0.25.21 by @renovate in #579
• Update module k8s.io/klog/v2 to v2.70.1 by @renovate in #594
• Update module helm.sh/helm/v3 to v3.9.1 by @renovate in #620
• Update kubernetes packages to v0.24.3 by @renovate in #622
• Update module github.com/derailed/k9s to v0.26.0 by @renovate in #629

• Update module github.com/pterm/pterm to v0.12.42 by @renovate in #548
• Update module github.com/spf13/cobra to v1.5.0 by @renovate in #549
• Update goreleaser build path by @jeff-mccoy in #567
• Update module github.com/derailed/k9s to v0.25.19 by @renovate in #568
• Update module github.com/AlecAivazis/survey/v2 to v2.3.5 by @renovate in #524
• Upda...

v0.19.6

Features

• Add support for package deploy via cosign sget by @YrrepNoj in #550
  

Known Issues

• The mutating webhook agent was updated to support UPDATE operations as well as CREATE, but there is a bug in it that you'll see as error message operation UPDATE is not registered or Unable to bind the webhook handler. If this issue is affecting you, you can use this patch:

  zarf package deploy sget://defenseunicorns/zarf-package-agent-hotfix:amd64
  kubectl -n flux-system rollout restart deployment/source-controller

  See #610 (comment) for complete details.

Fixes

• Fully remove zarf secrets from all namespaces by @jeff-mccoy in #558
• Make the agent mutate on update as well as create by @RothAndrew in #565
• Fixed broken bigbang link in examples README. by @mike-winberry in #547

Changes

• Update module github.com/pterm/pterm to v0.12.42 by @renovate in #548
• Update module github.com/spf13/cobra to v1.5.0 by @renovate in #549
• Update goreleaser build path by @jeff-mccoy in #567
• Update module github.com/derailed/k9s to v0.25.19 by @renovate in #568

Full Changelog: v0.19.5...v0.19.6