v0.39.0

What's Changed

• chore: update dos games release by @AustinAbro321 in #2921
• ci: id-token write application packages by @AustinAbro321 in #2923
• docs: update dos games example by @AustinAbro321 in #2924
• chore(deps): bump github/codeql-action from 3.26.4 to 3.26.5 by @dependabot in #2927
• chore: schema adr by @AustinAbro321 in #2600
• fix: remove use of pkg/errors by @phillebaba in #2937
• refactor: remove use of named returns in packager by @phillebaba in #2940
• chore(deps): bump github/codeql-action from 3.26.5 to 3.26.6 by @dependabot in #2948
• refactor: remove printing available Helm charts and versions when the Chart is not found by @phillebaba in #2944
• refactor: remove connect strings from packager property by @phillebaba in #2941
• fix(ci): test-imports workflow breaks when called from a fork by @AustinAbro321 in #2946
• feat: add health checks by @phillebaba in #2678
• refactor: move finding table printing to CLI by @phillebaba in #2960
• docs: update docs item in update Q2 roadmap by @eknowles in #2958
• chore(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #2957
• fix: progress bar image name flashes on push by @AustinAbro321 in #2965

New Contributors

• @eknowles made their first contribution in #2958

Full Changelog: v0.38.3...v0.39.0

v0.38.3

What's Changed

• fix: linter warnings in new Golang CI version by @phillebaba in #2883
• chore(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in #2871
• chore(deps): bump github/codeql-action from 3.26.0 to 3.26.1 by @dependabot in #2881
• test: move oci compose tests that don't need cluster by @AustinAbro321 in #2878
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.2 to 4.44.3 by @dependabot in #2870
• refactor: findImages to return errors immediately by @phillebaba in #2851
• test: add workflow to make sure importing Zarf works by @phillebaba in #2874
• refactor: remove unnecessary retry logic from data injection by @phillebaba in #2867
• docs: explain no wait & helm hooks interaction by @AustinAbro321 in #2895
• refactor: store managed secrets and add tests by @phillebaba in #2892
• chore(deps): bump github/codeql-action from 3.26.1 to 3.26.2 by @dependabot in #2888
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.2 by @dependabot in #2901
• fix: update injector by @AustinAbro321 in #2910
• chore(deps): bump github/codeql-action from 3.26.2 to 3.26.4 by @dependabot in #2916
• fix: update creds not breaking when internal git server not deployed by @AustinAbro321 in #2904
• feat: better error message on helm fail by @AustinAbro321 in #2914
• ci: increase lint timeout by @AustinAbro321 in #2919
• fix: evaulate templates on schema check by @AustinAbro321 in #2911
• chore: update workflow to use new key by @AustinAbro321 in #2920
• ci: permission at job level by @AustinAbro321 in #2922

Full Changelog: v0.38.2...v0.38.3

v0.38.2

What's Changed

• chore(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #2863
• chore(deps): bump k8s.io/kubectl from 0.30.0 to 0.30.3 by @dependabot in #2862
• ci: add renamed github workflow jobs to the shim workflow by @AustinAbro321 in #2858
• test: docker exec to in memory registry by @AustinAbro321 in #2869
• fix: replace helpers.Retry with go-retry and adjust delay by @phillebaba in #2856
• feat: introduce beta schema by @AustinAbro321 in #2859
• refactor: move validate to lint by @AustinAbro321 in #2839

Full Changelog: v0.38.0...v0.38.2

v0.38.1

What's Changed

• refactor: utilize invopop comment feature by @AustinAbro321 in #2781
• fix: detect invalid helm release names by @jamestexas in #2784
• refactor: move gitea code to separate package by @phillebaba in #2785
• fix: add dependabot and disable renovate features by @AustinAbro321 in #2789
• chore(deps): bump github/codeql-action from 3.24.0 to 3.25.15 by @dependabot in #2792
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.4 by @dependabot in #2791
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @dependabot in #2793
• chore(deps): bump docker/login-action from 3.0.0 to 3.3.0 by @dependabot in #2794
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.0 by @dependabot in #2795
• chore(deps): bump k8s.io/component-base from 0.30.0 to 0.30.3 by @dependabot in #2798
• ci: remove unneeded cve checking by @AustinAbro321 in #2802
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.43.1 to 4.44.2 by @dependabot in #2799
• chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #2808
• chore(deps): bump actions/create-github-app-token from 1.9.0 to 1.10.3 by @dependabot in #2809
• chore(deps): bump actions/download-artifact from 4.1.2 to 4.1.8 by @dependabot in #2810
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.7 by @dependabot in #2807
• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #2813
• chore(deps): bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #2811
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @dependabot in #2806
• fix: resolve CVE-2024-41110 by @AustinAbro321 in #2815
• refactor: git package by @phillebaba in #2790
• ci: better named gh jobs by @AustinAbro321 in #2816
• chore(deps): bump actions/dependency-review-action from 4.1.3 to 4.3.4 by @dependabot in #2822
• chore(deps): bump actions/setup-node from 4.0.2 to 4.0.3 by @dependabot in #2821
• chore: move context.TODO to context.Background() (4) by @schristoff in #2749
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.1 to 1.8.7 by @dependabot in #2800
• chore: turn down codecov by @schristoff in #2823
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.1 to 1.8.7 by @dependabot in #2812
• refactor: move and test HasImages by @phillebaba in #2831
• fix: disk pressure flakes by @AustinAbro321 in #2832
• chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #2834
• refactor: change isInternal variables to functions by @AustinAbro321 in #2768
• chore: update obsolete versions by @AustinAbro321 in #2830
• refactor: init zarf state by @AustinAbro321 in #2833
• fix: ignore config file not found errors by @AustinAbro321 in #2838
• fix: override tunnel details with user-provided settings by @chaospuppy in #2841
• refactor: move package generation to a local variable by @phillebaba in #2835
• feat: move ZarfPackageConfig to it's own api-versioned package by @AustinAbro321 in #2801
• refactor: replace debug logs with returning errors by @phillebaba in #2777
• refactor: proxy and add tests by @phillebaba in #2843
• chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #2848
• chore(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #2847
• test: add tests for FindImages by @phillebaba in #2850
• test: unit test index sha by @AustinAbro321 in #2844
• chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @dependabot in #2828
• chore: update dos games by @AustinAbro321 in #2845
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.16.0 to 0.17.3 by @dependabot in #2826
• chore(deps): bump github.com/pterm/pterm from 0.12.78 to 0.12.79 by @dependabot in #2854
• fix: install grype during release by @phillebaba in #2857

New Contributors

• @jamestexas made their first contribution in #2784

Full Changelog: v0.37.0...v0.38.1

v0.38.0

What's Changed

• refactor: utilize invopop comment feature by @AustinAbro321 in #2781
• fix: detect invalid helm release names by @jamestexas in #2784
• refactor: move gitea code to separate package by @phillebaba in #2785
• fix: add dependabot and disable renovate features by @AustinAbro321 in #2789
• chore(deps): bump github/codeql-action from 3.24.0 to 3.25.15 by @dependabot in #2792
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.4 by @dependabot in #2791
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @dependabot in #2793
• chore(deps): bump docker/login-action from 3.0.0 to 3.3.0 by @dependabot in #2794
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.0 by @dependabot in #2795
• chore(deps): bump k8s.io/component-base from 0.30.0 to 0.30.3 by @dependabot in #2798
• ci: remove unneeded cve checking by @AustinAbro321 in #2802
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.43.1 to 4.44.2 by @dependabot in #2799
• chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #2808
• chore(deps): bump actions/create-github-app-token from 1.9.0 to 1.10.3 by @dependabot in #2809
• chore(deps): bump actions/download-artifact from 4.1.2 to 4.1.8 by @dependabot in #2810
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.7 by @dependabot in #2807
• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #2813
• chore(deps): bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #2811
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @dependabot in #2806
• fix: resolve CVE-2024-41110 by @AustinAbro321 in #2815
• refactor: git package by @phillebaba in #2790
• ci: better named gh jobs by @AustinAbro321 in #2816
• chore(deps): bump actions/dependency-review-action from 4.1.3 to 4.3.4 by @dependabot in #2822
• chore(deps): bump actions/setup-node from 4.0.2 to 4.0.3 by @dependabot in #2821
• chore: move context.TODO to context.Background() (4) by @schristoff in #2749
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.1 to 1.8.7 by @dependabot in #2800
• chore: turn down codecov by @schristoff in #2823
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.1 to 1.8.7 by @dependabot in #2812
• refactor: move and test HasImages by @phillebaba in #2831
• fix: disk pressure flakes by @AustinAbro321 in #2832
• chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #2834
• refactor: change isInternal variables to functions by @AustinAbro321 in #2768
• chore: update obsolete versions by @AustinAbro321 in #2830
• refactor: init zarf state by @AustinAbro321 in #2833
• fix: ignore config file not found errors by @AustinAbro321 in #2838
• fix: override tunnel details with user-provided settings by @chaospuppy in #2841
• refactor: move package generation to a local variable by @phillebaba in #2835
• feat: move ZarfPackageConfig to it's own api-versioned package by @AustinAbro321 in #2801
• refactor: replace debug logs with returning errors by @phillebaba in #2777
• refactor: proxy and add tests by @phillebaba in #2843
• chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #2848
• chore(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #2847
• test: add tests for FindImages by @phillebaba in #2850
• test: unit test index sha by @AustinAbro321 in #2844
• chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @dependabot in #2828
• chore: update dos games by @AustinAbro321 in #2845
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.16.0 to 0.17.3 by @dependabot in #2826
• chore(deps): bump github.com/pterm/pterm from 0.12.78 to 0.12.79 by @dependabot in #2854
• fix: install grype during release by @phillebaba in #2857
• fix: import paths to avoid cycle by @phillebaba in #2861

New Contributors

• @jamestexas made their first contribution in #2784

Full Changelog: v0.37.0...v0.38.0

v0.37.0

What's Changed

• chore: update s3 injector by @AustinAbro321 in #2730
• docs: fix codeowners file by @salaxander in #2736
• refactor: rename image references by @phillebaba in #2733
• chore: move public test repo by @AustinAbro321 in #2739
• fix: update README.md by @schristoff-du in #2729
• docs: update to openssf code of conduct by @salaxander in #2734
• chore: update project name references by @lucasrod16 in #2741
• chore: move context.TODO to context.Background() by @schristoff in #2742
• docs: charter update by @KennyPaul in #2731
• chore: update CODEOWNERS to protect TSC files by @schristoff in #2744
• fix: replace debug logs with returning errors by @phillebaba in #2719
• fix: data injection to return errors by @phillebaba in #2720
• feat: revert "feat: remove .metadata.image from schema (#2606)" by @AustinAbro321 in #2618
• chore: update permissions for eks & ecr nightly tests by @AustinAbro321 in #2745
• refactor: move setup CLI to only run once in root command by @phillebaba in #2722
• chore: move context.TODO to context.Background() (3) by @schristoff in #2747
• fix(deps): update github.com/anchore/clio digest to ac88e09 by @renovate in #2527
• refactor: add error handling to view SBOM files by @phillebaba in #2752
• feat: annotate image mutation by @AustinAbro321 in #2755
• chore: move context.TODO to context.Background() (2) by @schristoff in #2746
• docs: update repo name across docs by @salaxander in #2735
• fix: add whitespace linter and fix all warnings by @phillebaba in #2764
• chore: move context.TODO to context.Background() (5) by @schristoff in #2750
• feat: run schema validation on create by @AustinAbro321 in #2585
• refactor: remove overly verbose debug logs by @phillebaba in #2751
• ci: improve nightly eks test by @AustinAbro321 in #2759
• chore: logging ADR by @phillebaba in #2588
• test: decrease reliance on dockerhub by @AustinAbro321 in #2766
• refactor: replace warning logs with returning errors by @phillebaba in #2762
• fix: type assertion error checking and enforce linter by @phillebaba in #2770
• chore: fix string formatting for several debug statements by @YrrepNoj in #2769
• chore: stop releasing to s3 by @AustinAbro321 in #2774
• fix: error formatting and comparison and enable errorlint by @phillebaba in #2771
• fix(deps): update module github.com/fluxcd/helm-controller/api to v1 by @renovate in #2487
• refactor: load state to return error if loading fails by @phillebaba in #2763
• fix: zarf dev instead of zerf-dev by @AustinAbro321 in #2779
• fix: goreleaser by @AustinAbro321 in #2782

New Contributors

• @KennyPaul made their first contribution in #2731

Full Changelog: v0.36.1...v0.37.0

v0.36.1

🚨 Important 🚨: Zarf will be moving from github.com/defenseunicorns/zarf to github.com/zarf-dev/zarf

What's Changed

• test: simplifying e2e test checks by @AustinAbro321 in #2721
• fix: fix link to CONTRIBUTING.md in PR template by @daveworth in #2726
• refactor: compile local cluster service format regexp just once by @matiasinsaurralde in #2727

New Contributors

• @daveworth made their first contribution in #2726
• @matiasinsaurralde made their first contribution in #2727

Full Changelog: v0.36.0...v0.36.1

v0.36.0

What's Changed

• refactor: remove unused constants and variables by @phillebaba in #2633
• docs: fixed wrong link in zarf site nerd notes page by @joelmccoy in #2639
• chore: s3 cleanup by @AustinAbro321 in #2632
• refactor: change UpdateZarfAgentValues to rolling restart by @lucasrod16 in #2644
• chore: make less by @AustinAbro321 in #2648
• fix: docs links by @AustinAbro321 in #2650
• refactor: remove use of reflections by @phillebaba in #2634
• refactor: remove use of message.Fatal in tools by @phillebaba in #2602
• refactor: remove k8s package by @phillebaba in #2627
• feat: add context to pull and data injections by @AustinAbro321 in #2654
• test: move creator tests into one file by @AustinAbro321 in #2658
• test: site and links by @AustinAbro321 in #2656
• chore: run unit tests on main by @AustinAbro321 in #2653
• fix(docs): update help docs for zarf connect to add clarity by @chaospuppy in #2662
• chore!: remove logging from init package by @lucasrod16 in #2625
• chore: patch CVE-2024-6104 by @lucasrod16 in #2669
• chore: patch CVE-2024-35255 by @lucasrod16 in #2670
• chore: patch CVE-2024-6257 by @lucasrod16 in #2671
• docs: data injection by @AustinAbro321 in #2668
• feat: flux HelmRepo & OCIRepo support in Zarf Agent by @cmwylie19 in #2005
• refactor: make lint use more accessible data type by @AustinAbro321 in #2660
• fix: remove helpers v1 by @AustinAbro321 in #2679
• refactor: test and cleanup injector by @phillebaba in #2629
• refactor: remove use message.Fatal in cmd package by @phillebaba in #2664
• ci: cleanup windows github action by @AustinAbro321 in #2673
• refactor: remove message.Fatal and spinner.Fatal by @phillebaba in #2676
• ci: add merge groups by @AustinAbro321 in #2680
• ci: remove dependency review merge queue and add label merge queue by @AustinAbro321 in #2688
• refactor: remove warnings property from packager by @phillebaba in #2687
• refactor: remove sbom view files property from packager by @phillebaba in #2695
• fix: remove ignore label when adopting resource by @phillebaba in #2699
• fix: revert fix: remove ignore label when adopting resource by @AustinAbro321 in #2711
• ci: run e2e tests by @AustinAbro321 in #2710
• refactor: test and refactor split file by @phillebaba in #2708
• refactor: remove unused message functions and verbose logging by @phillebaba in #2712
• refactor: connect command list printing by @phillebaba in #2703
• docs: add contributing doc to root and add tsc by @salaxander in #2706
• fix: remove unpinned image warning in lint for cosign signatures by @jasonwashburn in #2681

New Contributors

• @joelmccoy made their first contribution in #2639
• @chaospuppy made their first contribution in #2662
• @jasonwashburn made their first contribution in #2681

Full Changelog: v0.35.0...v0.36.0

v0.35.0

What's Changed

• refactor: remove use of k8s info and nodes by @phillebaba in #2551
• test: shutdown http test servers by @lucasrod16 in #2559
• feat: adding labels to all resources mutated by the agent by @AustinAbro321 in #2557
• test: zarf init state by @phillebaba in #2556
• refactor: remove use of k8s deprecations by @phillebaba in #2560
• test: remove validate pkg arch e2e test by @lucasrod16 in #2563
• test: remove TestMismatchedVersions e2e test by @lucasrod16 in #2564
• test: delete agent e2e label test by @AustinAbro321 in #2568
• fix: add custom error printing for Zarf commands by @phillebaba in #2575
• refactor: remove use of k8s dynamic by @phillebaba in #2561
• refactor: remove use of k8s namespace by @phillebaba in #2550
• fix: cancel Cobra parent context on interrupt by @phillebaba in #2567
• refactor: use root ctx in agent by @AustinAbro321 in #2578
• chore: deprecate DeprecatedKeys by @schristoff-du in #2581
• test: validate package by @AustinAbro321 in #2569
• chore: fix typos by @beholdenkey in #2590
• fix: docker containerd blob error by @AustinAbro321 in #2593
• fix(deps): update module github.com/defenseunicorns/pkg/oci to v1 by @renovate in #2511
• fix: change so that second SIGINT signal immediately exits program by @phillebaba in #2598
• refactor: add context in packager by @phillebaba in #2597
• chore: update go version to 1.22.4 by @lucasrod16 in #2595
• fix: handle errors in version command by @phillebaba in #2589
• fix: cosign image pulls by @AustinAbro321 in #2599
• refactor: move k8s tunnel to cluster package by @phillebaba in #2566
• test: cleanup e2e tests by @lucasrod16 in #2601
• refactor: enable errcheck linter by @phillebaba in #2501
• fix: crane option argument parameters by @phillebaba in #2609
• feat: remove .metadata.image from schema by @AustinAbro321 in #2606
• refactor: remove use of k8s pods by @phillebaba in #2553
• fix: pass image reference to syft sbom source object by @lucasrod16 in #2612
• fix: only build a single binary in the init-package make target by @lucasrod16 in #2614
• fix: avoid injector pod name collisions by @lucasrod16 in #2620
• fix: no longer remove the agent ignore label from namespaces by @Racer159 in #2623
• refactor: remove use of k8s secret by @phillebaba in #2565
• fix: using a new s3 backend for test data by @AustinAbro321 in #2630
• chore(deps): update goreleaser/goreleaser-action action to v6 by @renovate in #2596

Full Changelog: v0.34.0...v0.35.0

v0.34.0

What's Changed

• refactor: move validate to expose it as receivers by @Noxsios in #2419
• docs: add additional detail to security policy by @salaxander in #2488
• chore: cleanup stale grype ignores and patch golang.org/x/net CVE by @lucasrod16 in #2492
• docs: injector and init package reference material by @Noxsios in #2468
• chore: patch CVE-2024-3817 by @lucasrod16 in #2498
• refactor: cleaner image pulls by @Noxsios in #2460
• chore: adding @dgershman by @dgershman in #2506
• refactor: context usage in k8s code by @lucasrod16 in #2405
• ci: run revive using golang-lint-ci by @phillebaba in #2499
• feat: update injector away from rouille to axum by @schristoff in #2457
• refactor: enable testifylint linter by @phillebaba in #2504
• chore: remove rouille CVE from grype ignore by @lucasrod16 in #2515
• fix(agent): missing path for pod without labels by @brandtkeller in #2518
• fix: adopt namespace metadata by @AustinAbro321 in #2494
• refactor: enable ineffassign linter by @phillebaba in #2500
• test: cluster getDeployedPackages by @AustinAbro321 in #2523
• test: add unit tests for merge zarf state by @phillebaba in #2522
• test: pod agent unit tests by @AustinAbro321 in #2526
• docs: add google analytics for docs pages by @salaxander in #2530
• test: add unit tests for detect distro by @phillebaba in #2521
• test: add tests for injector by @phillebaba in #2534
• chore: add codecov by @schristoff-du in #2529
• chore: add unit tests for creator.LoadPackageDefinition by @lucasrod16 in #2531
• test: refactor network test by @phillebaba in #2533
• test: agent flux unit test by @AustinAbro321 in #2528
• chore: fix codecov by @schristoff in #2538
• test: creator.ComposeComponents by @lucasrod16 in #2537
• refactor: remove use of k8s serivce account by @phillebaba in #2544
• refactor: remove use of k8s service by @phillebaba in #2543
• refactor: remove use of k8s configmap by @phillebaba in #2541
• refactor: remove use of k8s hpa by @phillebaba in #2542
• test: add secrets tests by @phillebaba in #2540
• refactor: allow callers to directly set logfile location by @Noxsios in #2545
• test: add test for packager source by @phillebaba in #2525
• chore: add unit tests to variables pkg by @Racer159 in #2519
• test: clean up tests for composer by @phillebaba in #2532
• test: argo agent unit tests by @AustinAbro321 in #2536
• fix(release): do not delete testdata in release workflow by @lucasrod16 in #2547

Full Changelog: v0.33.2...v0.34.0