v0.31.0

What's Changed

⚠️ Breaking Changes

• Signing Zarf packages is now done with --signing-key and --signing-key-pass - the old --key flag is deprecated on zarf package create and has been removed from zarf package publish to support public keys instead
• Component composability (import.path) must point to a directory, pointing to a zarf.yaml directly is no longer supported

NOTE: These are mostly edge cases on zarf package create and don't impact zarf package deploy. If you are using either feature though ensure you update your package create process.

Features

• Introduce the only.flavor filter to allow building of package variants and provide a replacement for some group use cases by @Racer159 in #2105
• Add --no-progress to the zarf tools wait-for sub command by @WeaponX314 in #2093
• Expose Gitea image templates to custom init packages by @TristanHoladay in #2069

Rollup From v0.30 Patch Releases

• Support mirroring non-image artifacts (i.e. Cosign signatures, OCI Helm Charts, etc) under the images key by @mjnagel in #2027
• Improve support for finding images that are used in operators with zarf prepare find-images by @mjnagel in #2027
• Automatically discover cosign signatures / attestations for discovered images in zarf prepare find-images by @mjnagel in #2027
• Introduce Agent TLS secret rolling with zarf tools update-creds agent by @Racer159 in #2065

Fixes

• Fix excessive CPU usage during zarf connect by @bdw617 in #2111
• Wait for the registry deployment to be fully ready instead of a single pod before continuing by @Racer159 in #2116
• Use Docker's transform library to ensure image refs are consistency parsed by @Noxsios in #2087
• Improve behavior around cluster connection during deploy by @Noxsios in #2088
• Fix package publishing an already signed package by @Racer159 in #2077

Rollup From v0.30 Patch Releases

• Properly allow namespaces to be empty when using zarf tools wait-for by @Racer159 in #2055
• Fix package metadata templating when using zarf package create with -o to an OCI remote by @corang in #2067
• Properly return a nil on error during a cluster creation call to prevent panics by @Racer159 in #2068
• Streamline the creation of packages by removing the max package size prompt by @Racer159 in #2071

Docs

• Fix typos on the GitHub action page and SBOM ADR by @testwill in #2084
• Document the use of the -count=1 flag to disable test caching by @lucasrod16 in #2082

Rollup From v0.30 Patch Releases

• Update warning to caution admonition within the Pepr Webhooks example by @Racer159 in #2053
• Improve documentation for package sources and for the use of --max-package-size by @Racer159 in #2071

Dependencies

• Update all non-major dependencies (including k3s to v1.28.2+k3s1) by @renovate in #2022
• Update github.com/anchore/stereoscope digest to 5909e35 by @renovate in #2107

Development

• Refactor Zarf component import composition to use a linked list by @Noxsios in #2058
• Fix numbers in package templates not templating correctly by @Racer159 in #2076
• Remove the Zarf Web UI and update references to point to the new repo by @Racer159 in #2079

Rollup From v0.30 Patch Releases

• Add the cleanup files action to the push stage of release workflow by @Racer159 in #2073

New Contributors

• @bdw617 made their first contribution in #2111
• @WeaponX314 made their first contribution in #2093
• @TristanHoladay made their first contribution in #2069
• @testwill made their first contribution in #2084

Full Changelog: v0.31.0-rc1...v0.31.0