v0.81.0-rc1

What's Changed

🚀 Updates

• feat(lint): warn on images without a domain and archive images without .internal by @willswire in #4983
• feat: group verify flags in CLI help text by @AustinAbro321 in #5008
• ci: additional agent logs by @AustinAbro321 in #5006
• feat: direct docker daemon pull by @AustinAbro321 in #5001
• chore: fix error message typo in packager load identifySource by @jasonwashburn in #5018
• feat(verification)!: behavior updates for verification logic by @brandtkeller in #5011
• chore(deps): introduce 7 day cooldown period for dependabot by @soltysh in #5022
• chore(deps): bump syft to v1.46.0 by @brandtkeller in #5021
• feat(schema): update v1beta1 types by @AustinAbro321 in #4704
• feat: reduce docker daemon pull storage footprint by @AustinAbro321 in #5017
• feat(deprecate): zarf tools registy export by @AustinAbro321 in #5031
• feat(sbom)!: remove compare tool by @AustinAbro321 in #5033
• chore(deps): vendor dependencies by @soltysh in #4900
• fix(flags): depecate --zarf-cache in favor of just --cache by @soltysh in #5032
• ci: fix precommit linting of vendor directory by @brandtkeller in #5036
• feat: add registry logout function by @sepauli in #4976
• feat(sign)!: remove legacy signature from production by @brandtkeller in #5030
• chore(examples): refresh longhorn example to v1.11.2 by @acald-creator in #4923
• docs: update Azure KeyVault URL for package signing by @niklashempel in #5040
• feat: deprecate artifact server by @AustinAbro321 in #5041
• feat: deprecate sbom viewer by @AustinAbro321 in #5046
• feat(v1beta1): split target into create time selector and deploy time target by @AustinAbro321 in #5042
• docs(search): load pages from currently selected version by @AustinAbro321 in #5035
• chore: update go version by @brandtkeller in #5050
• feat(ocischeme)!: support per-host transport negotiation for plain http by @brandtkeller in #5047
• fix: update oras-go and mitigate auto-unpack by @brandtkeller in #5049
• feat(cmd): add viper option for cache by @AustinAbro321 in #5051

📦 Dependencies

• chore(deps): bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1 by @dependabot[bot] in #5015
• chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the actions-organization group by @dependabot[bot] in #5014
• chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @dependabot[bot] in #5038

New Contributors

• @acald-creator made their first contribution in #4923
• @niklashempel made their first contribution in #5040

Full Changelog: v0.80.0...v0.81.0-rc1

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.81.0-rc1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0-rc1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.81.0-rc1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0-rc1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.