v0.36.1

🚨 Important 🚨: Zarf will be moving from github.com/defenseunicorns/zarf to github.com/zarf-dev/zarf

What's Changed

• test: simplifying e2e test checks by @AustinAbro321 in #2721
• fix: fix link to CONTRIBUTING.md in PR template by @daveworth in #2726
• refactor: compile local cluster service format regexp just once by @matiasinsaurralde in #2727

New Contributors

• @daveworth made their first contribution in #2726
• @matiasinsaurralde made their first contribution in #2727

Full Changelog: v0.36.0...v0.36.1

v0.36.0

What's Changed

• refactor: remove unused constants and variables by @phillebaba in #2633
• docs: fixed wrong link in zarf site nerd notes page by @joelmccoy in #2639
• chore: s3 cleanup by @AustinAbro321 in #2632
• refactor: change UpdateZarfAgentValues to rolling restart by @lucasrod16 in #2644
• chore: make less by @AustinAbro321 in #2648
• fix: docs links by @AustinAbro321 in #2650
• refactor: remove use of reflections by @phillebaba in #2634
• refactor: remove use of message.Fatal in tools by @phillebaba in #2602
• refactor: remove k8s package by @phillebaba in #2627
• feat: add context to pull and data injections by @AustinAbro321 in #2654
• test: move creator tests into one file by @AustinAbro321 in #2658
• test: site and links by @AustinAbro321 in #2656
• chore: run unit tests on main by @AustinAbro321 in #2653
• fix(docs): update help docs for zarf connect to add clarity by @chaospuppy in #2662
• chore!: remove logging from init package by @lucasrod16 in #2625
• chore: patch CVE-2024-6104 by @lucasrod16 in #2669
• chore: patch CVE-2024-35255 by @lucasrod16 in #2670
• chore: patch CVE-2024-6257 by @lucasrod16 in #2671
• docs: data injection by @AustinAbro321 in #2668
• feat: flux HelmRepo & OCIRepo support in Zarf Agent by @cmwylie19 in #2005
• refactor: make lint use more accessible data type by @AustinAbro321 in #2660
• fix: remove helpers v1 by @AustinAbro321 in #2679
• refactor: test and cleanup injector by @phillebaba in #2629
• refactor: remove use message.Fatal in cmd package by @phillebaba in #2664
• ci: cleanup windows github action by @AustinAbro321 in #2673
• refactor: remove message.Fatal and spinner.Fatal by @phillebaba in #2676
• ci: add merge groups by @AustinAbro321 in #2680
• ci: remove dependency review merge queue and add label merge queue by @AustinAbro321 in #2688
• refactor: remove warnings property from packager by @phillebaba in #2687
• refactor: remove sbom view files property from packager by @phillebaba in #2695
• fix: remove ignore label when adopting resource by @phillebaba in #2699
• fix: revert fix: remove ignore label when adopting resource by @AustinAbro321 in #2711
• ci: run e2e tests by @AustinAbro321 in #2710
• refactor: test and refactor split file by @phillebaba in #2708
• refactor: remove unused message functions and verbose logging by @phillebaba in #2712
• refactor: connect command list printing by @phillebaba in #2703
• docs: add contributing doc to root and add tsc by @salaxander in #2706
• fix: remove unpinned image warning in lint for cosign signatures by @jasonwashburn in #2681

New Contributors

• @joelmccoy made their first contribution in #2639
• @chaospuppy made their first contribution in #2662
• @jasonwashburn made their first contribution in #2681

Full Changelog: v0.35.0...v0.36.0

v0.35.0

What's Changed

• refactor: remove use of k8s info and nodes by @phillebaba in #2551
• test: shutdown http test servers by @lucasrod16 in #2559
• feat: adding labels to all resources mutated by the agent by @AustinAbro321 in #2557
• test: zarf init state by @phillebaba in #2556
• refactor: remove use of k8s deprecations by @phillebaba in #2560
• test: remove validate pkg arch e2e test by @lucasrod16 in #2563
• test: remove TestMismatchedVersions e2e test by @lucasrod16 in #2564
• test: delete agent e2e label test by @AustinAbro321 in #2568
• fix: add custom error printing for Zarf commands by @phillebaba in #2575
• refactor: remove use of k8s dynamic by @phillebaba in #2561
• refactor: remove use of k8s namespace by @phillebaba in #2550
• fix: cancel Cobra parent context on interrupt by @phillebaba in #2567
• refactor: use root ctx in agent by @AustinAbro321 in #2578
• chore: deprecate DeprecatedKeys by @schristoff-du in #2581
• test: validate package by @AustinAbro321 in #2569
• chore: fix typos by @beholdenkey in #2590
• fix: docker containerd blob error by @AustinAbro321 in #2593
• fix(deps): update module github.com/defenseunicorns/pkg/oci to v1 by @renovate in #2511
• fix: change so that second SIGINT signal immediately exits program by @phillebaba in #2598
• refactor: add context in packager by @phillebaba in #2597
• chore: update go version to 1.22.4 by @lucasrod16 in #2595
• fix: handle errors in version command by @phillebaba in #2589
• fix: cosign image pulls by @AustinAbro321 in #2599
• refactor: move k8s tunnel to cluster package by @phillebaba in #2566
• test: cleanup e2e tests by @lucasrod16 in #2601
• refactor: enable errcheck linter by @phillebaba in #2501
• fix: crane option argument parameters by @phillebaba in #2609
• feat: remove .metadata.image from schema by @AustinAbro321 in #2606
• refactor: remove use of k8s pods by @phillebaba in #2553
• fix: pass image reference to syft sbom source object by @lucasrod16 in #2612
• fix: only build a single binary in the init-package make target by @lucasrod16 in #2614
• fix: avoid injector pod name collisions by @lucasrod16 in #2620
• fix: no longer remove the agent ignore label from namespaces by @Racer159 in #2623
• refactor: remove use of k8s secret by @phillebaba in #2565
• fix: using a new s3 backend for test data by @AustinAbro321 in #2630
• chore(deps): update goreleaser/goreleaser-action action to v6 by @renovate in #2596

Full Changelog: v0.34.0...v0.35.0

v0.34.0

What's Changed

• refactor: move validate to expose it as receivers by @Noxsios in #2419
• docs: add additional detail to security policy by @salaxander in #2488
• chore: cleanup stale grype ignores and patch golang.org/x/net CVE by @lucasrod16 in #2492
• docs: injector and init package reference material by @Noxsios in #2468
• chore: patch CVE-2024-3817 by @lucasrod16 in #2498
• refactor: cleaner image pulls by @Noxsios in #2460
• chore: adding @dgershman by @dgershman in #2506
• refactor: context usage in k8s code by @lucasrod16 in #2405
• ci: run revive using golang-lint-ci by @phillebaba in #2499
• feat: update injector away from rouille to axum by @schristoff in #2457
• refactor: enable testifylint linter by @phillebaba in #2504
• chore: remove rouille CVE from grype ignore by @lucasrod16 in #2515
• fix(agent): missing path for pod without labels by @brandtkeller in #2518
• fix: adopt namespace metadata by @AustinAbro321 in #2494
• refactor: enable ineffassign linter by @phillebaba in #2500
• test: cluster getDeployedPackages by @AustinAbro321 in #2523
• test: add unit tests for merge zarf state by @phillebaba in #2522
• test: pod agent unit tests by @AustinAbro321 in #2526
• docs: add google analytics for docs pages by @salaxander in #2530
• test: add unit tests for detect distro by @phillebaba in #2521
• test: add tests for injector by @phillebaba in #2534
• chore: add codecov by @schristoff-du in #2529
• chore: add unit tests for creator.LoadPackageDefinition by @lucasrod16 in #2531
• test: refactor network test by @phillebaba in #2533
• test: agent flux unit test by @AustinAbro321 in #2528
• chore: fix codecov by @schristoff in #2538
• test: creator.ComposeComponents by @lucasrod16 in #2537
• refactor: remove use of k8s serivce account by @phillebaba in #2544
• refactor: remove use of k8s service by @phillebaba in #2543
• refactor: remove use of k8s configmap by @phillebaba in #2541
• refactor: remove use of k8s hpa by @phillebaba in #2542
• test: add secrets tests by @phillebaba in #2540
• refactor: allow callers to directly set logfile location by @Noxsios in #2545
• test: add test for packager source by @phillebaba in #2525
• chore: add unit tests to variables pkg by @Racer159 in #2519
• test: clean up tests for composer by @phillebaba in #2532
• test: argo agent unit tests by @AustinAbro321 in #2536
• fix(release): do not delete testdata in release workflow by @lucasrod16 in #2547

Full Changelog: v0.33.2...v0.34.0

v0.33.2

What's Changed

• fix: schema integration by @AustinAbro321 in #2463
• docs: add contributor covenant code of conduct by @salaxander in #2462
• docs: fix casing on code of conduct badge by @salaxander in #2466
• fix(deps): update github.com/anchore/clio digest to 3c4abf8 by @renovate in #2424
• fix: update docker media type in registry by @AustinAbro321 in #2476
• fix: adds GetVariableConfig function for packager by @decleaver in #2475
• test: add tests for remove copies from components to enable refactoring by @phillebaba in #2473
• fix!: do not uninstall helm chart after failed install or upgrade by @lucasrod16 in #2456
• feat: inspect --list-images by @Noxsios in #2478
• refactor: remove copies from components to a filter by @phillebaba in #2474
• chore: add support.md by @schristoff in #2480
• chore: add a check for go mod tidy by @lucasrod16 in #2481
• fix: use correct sha256 checksum for arm64 injector binary by @lucasrod16 in #2483
• fix: simplify go mod tidy check by @lucasrod16 in #2482

New Contributors

• @salaxander made their first contribution in #2462
• @phillebaba made their first contribution in #2473
• @schristoff made their first contribution in #2480

Full Changelog: v0.33.1...v0.33.2

v0.33.1

What's Changed

• fix: add redirect so old zarf base link is compatiable by @AustinAbro321 in #2432
• ci: pin third-party gh actions by hash by @lucasrod16 in #2433
• docs: add redirect for examples by @lucasrod16 in #2438
• docs: update contributing and pre-commit by @Noxsios in #2439
• ci: fix revive image ref in lint workflow by @lucasrod16 in #2436
• fix: filter on running pods when finding an image for injector pod by @lucasrod16 in #2415
• fix: readme dead links by @AustinAbro321 in #2442
• fix: differential package create with non local sources by @AustinAbro321 in #2444
• refactor: move variables into separate package by @Racer159 in #2414
• ci: add top level workflow permission to commitlint by @lucasrod16 in #2449
• ci: remove unused env var from codeql workflow by @lucasrod16 in #2450
• chore: cleanup root level files and add SPDX check for Go files by @Noxsios in #2431
• feat: config to enable resilient registry by @Michael-Kruggel in #2440
• docs: init package clarity and cleanup by @AustinAbro321 in #2447
• ci: compare cves to main by @AustinAbro321 in #2448
• test: unpin version in bigbang extension test by @lucasrod16 in #2459
• fix: broken schema from unexpanded embedded variables by @AustinAbro321 in #2458
• fix: error on create if an index sha is used by @AustinAbro321 in #2429

New Contributors

• @Michael-Kruggel made their first contribution in #2440

Full Changelog: v0.33.0...v0.33.1

v0.33.0

What's Changed

• fix: update deprecated syft packages command to syft scan by @lucasrod16 in #2399
• chore: move helpers to defenseunicorns/pkg by @AustinAbro321 in #2402
• fix(deps): update github.com/anchore/clio digest to fb5fc4c by @renovate in #2366
• feat(tools): add yq by @zachariahmiller in #2406
• chore: switch to use oci lib in defenseunicorns/pkg by @AustinAbro321 in #2404
• fix(deps): update module github.com/defenseunicorns/pkg/helpers to v1 by @renovate in #2411
• fix: use env var for PR title in commitlint workflow to prevent untrusted script injection by @lucasrod16 in #2418
• fix: use default GITHUB_TOKEN for ossf/scorecard-action by @bburky in #2416
• fix: remove duplicate logic for writing image layers to disk concurrently by @lucasrod16 in #2409
• feat: add option to skip cosign lookup during find images by @Racer159 in #2427
• feat: allow chart deploy overrides ALPHA by @naveensrinivasan in #2403
• chore: update pull_request_template.md by @Noxsios in #2428
• ci: pin k3s image version in k3d github action by @lucasrod16 in #2430
• feat(docs): port docs to starlight by @Noxsios in #2315

New Contributors

• @zachariahmiller made their first contribution in #2406
• @bburky made their first contribution in #2416

Full Changelog: v0.32.6...v0.33.0

v0.32.6

[0.32.6] - 2024-03-22

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• [ALPHA] feat: package generation ALPHA by @andrewg-xyz in #2269
• (lib) feat(lib): configurable log file location by @Noxsios in #2380
• [BREAKING] feat!: filter package components with strategy interface by @Noxsios in #2321

🐛 Bug Fixes

• fix: refactor create stages into separate lib by @lucasrod16 in #2223
• fix: handle registry caBundle as a multiline string by @AbrohamLincoln in #2381
• (regression) fix: populate p.sbomViewFiles on deploy and mirror by @lucasrod16 in #2386
• fix: allow absolute paths for differential packages by @AustinAbro321 in #2397
• fix: hotfix skeleton publish by @Noxsios in #2398

🚜 Refactor

• refactor: split helpers/exec libs by @Racer159 in #2379

🧪 Testing

• test: data injection flake by @lucasrod16 in #2361

⚙️ Miscellaneous Tasks

• ci: add commitlint workflow and update contributing guide by @lucasrod16 in #2391

🛡️ Security

• (release) build: create PRs on homebrew-tap by @Noxsios in #2385

Full Changelog: v0.32.5...v0.32.6

v0.32.5

[0.32.5] - 2024-03-11

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• feat: add missing vendored tool version commands by @eddiezane in #2232
• feat: add --why flag for zarf dev find-images by @waveywaves in #2309
• feat: set variables on find images by @AustinAbro321 in #2282
• feat: add configurable backoff and retries for Zarf operations by @Racer159 in #2345

🐛 Bug Fixes

• (deps): update github.com/anchore/clio digest to abcb719 by @renovate[bot] in #2347
• (ci): change ECR image to docker.io image by @AustinAbro321 in #2353
• fix: added OCI Image Index mediaType by @mdaizcorbe in #2352
• fix: package publish progress bar frozen at zero by @Noxsios in #2367
• (release) hotfix publish not respecting source package architecture by @Noxsios in #2376

📚 Documentation

• chore: fix spelling by @AustinAbro321 in #2333
• docs: formatting and grammar by @beholdenkey in #2350

⚙️ Miscellaneous Tasks

• chore: sorted go imports by @naveensrinivasan in #2349
• chore: fix bb test by @AustinAbro321 in #2340
• chore: update CODEOWNERS with @AustinAbro321 by @Racer159 in #2354
• chore: refactor and purify the OCI library within Zarf by @AustinAbro321 in #2235
• chore: default to temp zarf cache in e2e tests by @AustinAbro321 in #2355

🛡️ Security

• chore: configure agent server to avoid slowloris attack by @naveensrinivasan in #2342
• chore: fix implicit memory aliasing in for loop by @naveensrinivasan in #2341
• (release): update release workflow to use token from gh app by @Noxsios in #2368
• (release): use release environment secrets by @Noxsios in #2374

First Time Contributors

• @eddiezane made their first contribution in #2232
• @beholdenkey made their first contribution in #2350
• @mdaizcorbe made their first contribution in #2352

Full Changelog: v0.32.4...v0.32.5

v0.32.4

What's Changed

Fixes

• Improve cmd failure messaging when no timeout or retries are given by @docandrew in #2301
• Revert init package storageclass checks for git server and seed registry by @lucasrod16 in #2311
• Fix multi-part tarballs being mismatched sizes by @Racer159 in #2314
• Change text template detection to check first and last 512 bytes by @WeaponX314 in #2310
• Improve zarf tools registry prune messaging by @Racer159 in #2323
• Add http request header timeout to mitigate stalling image push by @Racer159 in #2319
• Allow host+subpath as the source registry for --registry-override in package create by @waveywaves in #2306

Dependencies

• Update github.com/anchore/clio digest to cb94e40 by @renovate in #2294, #2297 and #2300
• [security] Update module helm.sh/helm/v3 to v3.14.2 by @renovate in #2307 and #2329
• Update actions/checkout action to v4 by @renovate in #2317
• Update actions/dependency-review-action action to v4 by @renovate in #2318

Docs

• Update Zarf roadmap per 2024 goals by @Racer159 in #2305

Development

• Included Dependency Review action for PR reviews by @naveensrinivasan in #2298
• Resolve CodeQL linting issues across Zarf by @Racer159 in #2322

New Contributors

• @docandrew made their first contribution in #2301
• @naveensrinivasan made their first contribution in #2298
• @waveywaves made their first contribution in #2306

Full Changelog: v0.32.3...v0.32.4