v0.84.0

0.84.0 (2026-08-20)

⚠ BREAKING CHANGES

• v1beta1: use package definition across public packager functionality (#5173)

Features

• agent: add variable for mutating webhook annotations (#5243) (1de2f08)
• allow excluding ArgoCD and Flux resources from Zarf Agent mutation (#5224) (804b22b)
• dev: evaluate helm chart schemas in dev generate-schema (#5176) (e1ca156)
• injector image flag (#5214) (86d732a)
• introduce zarf dev template (#5206) (826d2a0)
• v1beta1: load v1beta1 packages (#5048) (f82e001)
• v1beta1: use package definition across public packager functionality (#5173) (7a33a42)

Bug Fixes

• add values flags to dev deploy and init (#5234) (fc9226f)
• deprecated schema fields (#5195) (f21f80a)
• negotiate oci scheme for allowing plain http oci endpoints (#5197) (b5fbffa)
• packager.Remove() uses ZarfDefaultTimeout as default timeout (#5253) (11f82f3)
• registry mode not handled properly in update-creds (#5230) (b2a4132)
• replace mimetype with archives (#5228) (a4bfd8a)

Refactoring

• move template out of internal (#5212) (15e05ba)

What's Changed

🚀 Updates

• chore(main): release 0.84.0 by @zarf-release-please[bot] in #5196

Full Changelog: v0.84.0-rc1...v0.84.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.84.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.84.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.