v0.32.6

[0.32.6] - 2024-03-22

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• [ALPHA] feat: package generation ALPHA by @andrewg-xyz in #2269
• (lib) feat(lib): configurable log file location by @Noxsios in #2380
• [BREAKING] feat!: filter package components with strategy interface by @Noxsios in #2321

🐛 Bug Fixes

• fix: refactor create stages into separate lib by @lucasrod16 in #2223
• fix: handle registry caBundle as a multiline string by @AbrohamLincoln in #2381
• (regression) fix: populate p.sbomViewFiles on deploy and mirror by @lucasrod16 in #2386
• fix: allow absolute paths for differential packages by @AustinAbro321 in #2397
• fix: hotfix skeleton publish by @Noxsios in #2398

🚜 Refactor

• refactor: split helpers/exec libs by @Racer159 in #2379

🧪 Testing

• test: data injection flake by @lucasrod16 in #2361

⚙️ Miscellaneous Tasks

• ci: add commitlint workflow and update contributing guide by @lucasrod16 in #2391

🛡️ Security

• (release) build: create PRs on homebrew-tap by @Noxsios in #2385

Full Changelog: v0.32.5...v0.32.6

v0.32.5

[0.32.5] - 2024-03-11

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• feat: add missing vendored tool version commands by @eddiezane in #2232
• feat: add --why flag for zarf dev find-images by @waveywaves in #2309
• feat: set variables on find images by @AustinAbro321 in #2282
• feat: add configurable backoff and retries for Zarf operations by @Racer159 in #2345

🐛 Bug Fixes

• (deps): update github.com/anchore/clio digest to abcb719 by @renovate[bot] in #2347
• (ci): change ECR image to docker.io image by @AustinAbro321 in #2353
• fix: added OCI Image Index mediaType by @mdaizcorbe in #2352
• fix: package publish progress bar frozen at zero by @Noxsios in #2367
• (release) hotfix publish not respecting source package architecture by @Noxsios in #2376

📚 Documentation

• chore: fix spelling by @AustinAbro321 in #2333
• docs: formatting and grammar by @beholdenkey in #2350

⚙️ Miscellaneous Tasks

• chore: sorted go imports by @naveensrinivasan in #2349
• chore: fix bb test by @AustinAbro321 in #2340
• chore: update CODEOWNERS with @AustinAbro321 by @Racer159 in #2354
• chore: refactor and purify the OCI library within Zarf by @AustinAbro321 in #2235
• chore: default to temp zarf cache in e2e tests by @AustinAbro321 in #2355

🛡️ Security

• chore: configure agent server to avoid slowloris attack by @naveensrinivasan in #2342
• chore: fix implicit memory aliasing in for loop by @naveensrinivasan in #2341
• (release): update release workflow to use token from gh app by @Noxsios in #2368
• (release): use release environment secrets by @Noxsios in #2374

First Time Contributors

• @eddiezane made their first contribution in #2232
• @beholdenkey made their first contribution in #2350
• @mdaizcorbe made their first contribution in #2352

Full Changelog: v0.32.4...v0.32.5

v0.32.4

What's Changed

Fixes

• Improve cmd failure messaging when no timeout or retries are given by @docandrew in #2301
• Revert init package storageclass checks for git server and seed registry by @lucasrod16 in #2311
• Fix multi-part tarballs being mismatched sizes by @Racer159 in #2314
• Change text template detection to check first and last 512 bytes by @WeaponX314 in #2310
• Improve zarf tools registry prune messaging by @Racer159 in #2323
• Add http request header timeout to mitigate stalling image push by @Racer159 in #2319
• Allow host+subpath as the source registry for --registry-override in package create by @waveywaves in #2306

Dependencies

• Update github.com/anchore/clio digest to cb94e40 by @renovate in #2294, #2297 and #2300
• [security] Update module helm.sh/helm/v3 to v3.14.2 by @renovate in #2307 and #2329
• Update actions/checkout action to v4 by @renovate in #2317
• Update actions/dependency-review-action action to v4 by @renovate in #2318

Docs

• Update Zarf roadmap per 2024 goals by @Racer159 in #2305

Development

• Included Dependency Review action for PR reviews by @naveensrinivasan in #2298
• Resolve CodeQL linting issues across Zarf by @Racer159 in #2322

New Contributors

• @docandrew made their first contribution in #2301
• @naveensrinivasan made their first contribution in #2298
• @waveywaves made their first contribution in #2306

Full Changelog: v0.32.3...v0.32.4

v0.32.3

What's Changed

Fixes

• Properly handle panic that could occur during checksum validation by @mjnagel in #2262
• Add the --key flag to the init cmd to properly allow for signed init packages by @dgershman in #2259
• Restore destroy script functionality during zarf destroy by @Racer159 in #2274
• Fix symlink inclusion within component resources by @dgershman in #2256
• Use memory friendly file split logic for partial packages by @daniel-palmer-gu in #2264
• Fix reproducible tarball creation on Windows systems by @Noxsios in #2293

Docs

• Make branding more consistent and add community meetup references to docs by @Racer159 in #2258

Dependencies

• Update github.com/anchore/clio digest by @renovate in #2277 and #2283
• Update all non-major dependencies (including Gitea v1.21.5, Syft v0.100.0, K9s v0.31.7 and Crane v0.19.0) by @renovate in #2187

Development

• Add a more robust chart search regexManager by @Racer159 in #2278 and #2284
• Partial refactor of injector logic in k8s, and cluster packages by @chrishorton in #2271

New Contributors

• @daniel-palmer-gu made their first contribution in #2264

Full Changelog: v0.32.2...v0.32.3

v0.32.2

What's Changed

Features

• Support authenticated Helm repositories that have been configured with helm repo add by @AustinAbro321 in #2196
• Verify that the specified storage class exists during zarf init by @lucasrod16 in #2180
• Check for available node resources before building injector pod by @chrishorton in #2220
• Officially support yaml extensions within the zarf.yaml using x- keys by @AustinAbro321 in #2217

Fixes

• Fix the inclusion of helm sub commands when rendering zarf tools help by @jbrewer3 in #2216

Docs

• Fix typos in the extension README.md by @mjnagel in #2227
• Fix a small grammatical error in the base README.md by @cmwylie19 in #2219

Dependencies

• Update github.com/anchore/clio digest to 89e2fe8 by @renovate in #2214
• Update github.com/anchore/clio digest to a5e93b6 by @renovate in #2229
• Update github.com/anchore/stereoscope digest to eb656fc by @renovate in #2230

Development

• Remove workflow for automatically adding issues to the zarf project by @YrrepNoj in #2239
• Delete unnecessary waitgroup from concurrencyTools by @AustinAbro321 in #2244
• Update NewOrasRemote to take ocispec.Platform as an argument by @decleaver in #2241

New Contributors

• @jbrewer3 made their first contribution in #2216
• @chrishorton made their first contribution in #2220

Full Changelog: v0.32.1...v0.32.2

v0.32.1

What's Changed

Fixes

• ResolveRoot now properly returns an error when a target platform is not provided when used as a library by @Noxsios in #2212
• Fix reproducibility of internal tarballs for components + sboms to allow better OCI layer reuse by @Noxsios in #2210

Docs

• Remove dos-games skeleton references and instead use the skeleton architecture index by @Noxsios in #2208

Dependencies

• [security] Update github.com/go-git/go-git/v5 to v5.11.0 by @renovate in #2209
• [security] Update github.com/containerd/containerd to v1.7.11 by @renovate in #2209
• Update github.com/anchore/syft to v0.99.0 by @renovate in #2185
• Update github.com/anchore/clio digest to 3e50431 by @renovate in #2207
• Update github.com/anchore/stereoscope digest to 590920d by @renovate in #2206
• Update github/codeql-action action to v3 by @renovate in #2191

Full Changelog: v0.32.0...v0.32.1

v0.32.0

What's Changed

⚠️ Breaking Changes

• Gitea has been updated from the 8.x series chart (app version 1.19.3) to the 10.x series chart (app version 1.21.2) - this update contains breaking changes and should be tested if you are using this component - default Zarf installs will upgrade automatically but more advanced configurations / use cases should be reviewed. Gitea Release Notes
• Zarf package OCI references now use OCI indexes / platforms to handle architecture - packages published to OCI with this version of Zarf will be placed within an index and won't be able to be pulled with older versions - old packages will still be able to be pulled however.
• Component and package names can no longer start with a leading - as this is used within the deselect syntax introduced for --components

Features

    

• Add zarf dev deploy for quickly testing packages and restructure zarf prepare into zarf dev by @Noxsios in #2170
• Introduce unpinned resources (images/repos/files) warning for zarf dev lint by @AustinAbro321 in #2171
• Add glob selection and deselection support to --components by @Racer159 in #2175
• Switch to indexed platforms for OCI architectures (eliminate -amd64, -arm64 tag mangling) by @Noxsios in #2184

Rollup From v0.31 Patch Releases

• Introduce zarf prepare lint to perform schema validation and lay groundwork for standardizing best practices by @AustinAbro321 in #2075
• Add zarf package remove/inspect completion for package names from cluster sources by @WeaponX314 in #2151
• Add a warning when no components are selected for deployment in a package by @bdw617 in #2167
• Allow passing additional arguments to k9s when invoked by zarf tools monitor by @WeaponX314 in #2095
• Add REGISTRY_CA_BUNDLE variable to registry package and chart to improve S3 backed registries by @AbrohamLincoln in #2008
• Add GIT_SERVER_DISABLE_REGISTRATION variable to allow for Gitea registration, so that SSO can be used by @dgershman in #2118
• [Library Only] Initial implementation of Helm Chart overrides at deploy time by @Racer159 in #2131

Fixes

• Update error message when the image doesn't exist locally or on a remote by @bdw617 in #2160
• Corrected k8s / helm k8s client version within Helm templating by @AustinAbro321 in #2197
• Properly handle tunnel error channels to force retries of image pushing by @Racer159 in #2190

Rollup From v0.31 Patch Releases

• Fix helm chart clobbering and differences with Zarf and Helm chart names along with new repoName key by @Racer159 in #2174
• Add message asking if the user has init'ed their cluster and slim down error messages more generally by @AustinAbro321 in #2177
• Fix compose dropping the only.localOS filter from the composed package by @Racer159 in #2173
• Improve Helm rollback logic, messaging, and support for local tarballs by @Racer159 in #2157
• Add warnings to better log the errors encountered on image push retries by @Racer159 in #2147
• Make set -e (and $ErrorActionPreference = 'Stop';) the default for multiline actions so that they fail correctly by @UncleGedd in #2148
• Properly handle variable and constant merging when using composable components by @Racer159 in #2129
• Use the node name instead of the hostname label to build the injector pod by @Racer159 in #2119
• Resolve pathing issues while loading images with Zarf on Windows by @Racer159 in #2106
• Add an error channel for progress bar rendering to properly stop the progress bar when used as a library by @UncleGedd in #2117
• Keep a useable empty dir volume within the registry even when persistence is disabled by @Racer159 in #2124

Docs

Rollup From v0.31 Patch Releases

• Update the Airgap Software Delivery course name by @AustinAbro321 in #2172
• Promote the Quick Start section to Getting Started by @Racer159 in #2182
• Fix link and content issues across the docs by @AustinAbro321 in #2168
• Improve the docs for zarf tools k9s options and other command examples by @Racer159 in #2132
• Update the Zarf overview to be more clear about how Zarf works by @Racer159 in #2122

Dependencies

• Update gitea chart from 8.3.0 to 10.0.0 by @TristanHoladay in #2123
• Update module golang.org/x/crypto to v0.17.0 [security] by @renovate in #2201
• Update sigstore/cosign-installer action to v3 by @renovate in #1400
• Update github.com/anchore/stereoscope digest to 4b999b7 by @renovate in #2198
• Update dependency pepr to v20 by @renovate in #2193
• Update actions/download-artifact action to v4 by @renovate in #2194

Rollup From v0.31 Patch Releases

• Update actions/setup-go action to v5 by @renovate in #2179
• Update all non-major dependencies by @renovate in #2099
• Update github.com/anchore/clio digest to 767f622 by @renovate in #2186
• Update component-webhooks example to use new Pepr k8s fluent client by @lucasrod16 in #2090
• Update k8s.io/utils digest to cf03d44 then to b307cd5 by @renovate in #2156 and #2161
• Update github.com/anchore/stereoscope digest to 3610f4e by @renovate in #2155
• [security] Update module github.com/sigstore/cosign/v2 to v2.2.1 by @renovate in #2134

Development

• Update the release workflow to accept sigstore terms and sign by digest by @Racer159 in #2204 and #2205
• Update references to new ironbank credentials in bigbang workflow by @lucasrod16 in #2192

Rollup From v0.31 Patch Releases

• Move the cluster library from internal to pkg to make it available to consumers by @Noxsios in #2162
• Promote @lucasrod16 to be a full maintainer by @Racer159 in #2166
• Fix race condition in TestValidateLastNonBreakingVersion unit test by @lucasrod16 in #2138
• Split up the e2e tests that need a cluster, versus ones that do not to speed up CI by @bdw617 in #2139
• Update external tests to run in a unique k3d cluster and use the same Gitea chart as Zarf by @bdw617 in #2145

Full Changelog: v0.31.4...v0.32.0

v0.32.0-rc1

What's Changed

• feat: add zarf dev deploy for quickly testing packages and restructure zarf prepare by @Noxsios in #2170
• fix: update error message when the image doesn't exist locally or on a remote by @bdw617 in #2160
• fix: updated k8s / helm k8s version by @AustinAbro321 in #2197
• fix: properly handle the tunnel error channel to retry image pushing by @Racer159 in #2190
• chore(deps): update github.com/anchore/stereoscope digest to 4b999b7 by @renovate in #2198
• chore(deps): update dependency pepr to v20 by @renovate in #2193
• chore(deps): update actions/download-artifact action to v4 by @renovate in #2194
• chore: update references to new ironbank credentials in bigbang workflow by @lucasrod16 in #2192

Full Changelog: v0.31.4...v0.32.0-rc1

v0.31.4

What's Changed

Fixes

• Fix helm chart clobbering and differences with Zarf and Helm chart names along with new repoName key by @Racer159 in #2174
• Add message asking if the user has init'ed their cluster and slim down error messages more generally by @AustinAbro321 in #2177
• Fix compose dropping the only.localOS filter from the composed package by @Racer159 in #2173

Docs

• Update the Airgap Software Delivery course name by @AustinAbro321 in #2172
• Promote the Quick Start section to Getting Started by @Racer159 in #2182

Deps

• Update actions/setup-go action to v5 by @renovate in #2179
• Update all non-major dependencies by @renovate in #2099
• Update github.com/anchore/clio digest to 767f622 by @renovate in #2186

Full Changelog: v0.31.3...v0.31.4

v0.31.3

What's Changed

Features

• Introduce zarf prepare lint to perform schema validation and lay groundwork for standardizing best practices by @AustinAbro321 in #2075
• Add zarf package remove/inspect completion for package names from cluster sources by @WeaponX314 in #2151
• Add a warning when no components are selected for deployment in a package by @bdw617 in #2167

Fixes

• Improve Helm rollback logic, messaging, and support for local tarballs by @Racer159 in #2157

Docs

• Fix link and content issues across the docs by @AustinAbro321 in #2168

Dependencies

• Update component-webhooks example to use new Pepr k8s fluent client by @lucasrod16 in #2090
• Update k8s.io/utils digest to cf03d44 then to b307cd5 by @renovate in #2156 and #2161
• Update github.com/anchore/stereoscope digest to 3610f4e by @renovate in #2155

Development

• Move the cluster library from internal to pkg to make it available to consumers by @Noxsios in #2162
• Promote @lucasrod16 to be a full maintainer by @Racer159 in #2166

Full Changelog: v0.31.2...v0.31.3