v0.34.0

What's Changed

• refactor: move validate to expose it as receivers by @Noxsios in #2419
• docs: add additional detail to security policy by @salaxander in #2488
• chore: cleanup stale grype ignores and patch golang.org/x/net CVE by @lucasrod16 in #2492
• docs: injector and init package reference material by @Noxsios in #2468
• chore: patch CVE-2024-3817 by @lucasrod16 in #2498
• refactor: cleaner image pulls by @Noxsios in #2460
• chore: adding @dgershman by @dgershman in #2506
• refactor: context usage in k8s code by @lucasrod16 in #2405
• ci: run revive using golang-lint-ci by @phillebaba in #2499
• feat: update injector away from rouille to axum by @schristoff in #2457
• refactor: enable testifylint linter by @phillebaba in #2504
• chore: remove rouille CVE from grype ignore by @lucasrod16 in #2515
• fix(agent): missing path for pod without labels by @brandtkeller in #2518
• fix: adopt namespace metadata by @AustinAbro321 in #2494
• refactor: enable ineffassign linter by @phillebaba in #2500
• test: cluster getDeployedPackages by @AustinAbro321 in #2523
• test: add unit tests for merge zarf state by @phillebaba in #2522
• test: pod agent unit tests by @AustinAbro321 in #2526
• docs: add google analytics for docs pages by @salaxander in #2530
• test: add unit tests for detect distro by @phillebaba in #2521
• test: add tests for injector by @phillebaba in #2534
• chore: add codecov by @schristoff-du in #2529
• chore: add unit tests for creator.LoadPackageDefinition by @lucasrod16 in #2531
• test: refactor network test by @phillebaba in #2533
• test: agent flux unit test by @AustinAbro321 in #2528
• chore: fix codecov by @schristoff in #2538
• test: creator.ComposeComponents by @lucasrod16 in #2537
• refactor: remove use of k8s serivce account by @phillebaba in #2544
• refactor: remove use of k8s service by @phillebaba in #2543
• refactor: remove use of k8s configmap by @phillebaba in #2541
• refactor: remove use of k8s hpa by @phillebaba in #2542
• test: add secrets tests by @phillebaba in #2540
• refactor: allow callers to directly set logfile location by @Noxsios in #2545
• test: add test for packager source by @phillebaba in #2525
• chore: add unit tests to variables pkg by @Racer159 in #2519
• test: clean up tests for composer by @phillebaba in #2532
• test: argo agent unit tests by @AustinAbro321 in #2536
• fix(release): do not delete testdata in release workflow by @lucasrod16 in #2547

Full Changelog: v0.33.2...v0.34.0

v0.33.2

What's Changed

• fix: schema integration by @AustinAbro321 in #2463
• docs: add contributor covenant code of conduct by @salaxander in #2462
• docs: fix casing on code of conduct badge by @salaxander in #2466
• fix(deps): update github.com/anchore/clio digest to 3c4abf8 by @renovate in #2424
• fix: update docker media type in registry by @AustinAbro321 in #2476
• fix: adds GetVariableConfig function for packager by @decleaver in #2475
• test: add tests for remove copies from components to enable refactoring by @phillebaba in #2473
• fix!: do not uninstall helm chart after failed install or upgrade by @lucasrod16 in #2456
• feat: inspect --list-images by @Noxsios in #2478
• refactor: remove copies from components to a filter by @phillebaba in #2474
• chore: add support.md by @schristoff in #2480
• chore: add a check for go mod tidy by @lucasrod16 in #2481
• fix: use correct sha256 checksum for arm64 injector binary by @lucasrod16 in #2483
• fix: simplify go mod tidy check by @lucasrod16 in #2482

New Contributors

• @salaxander made their first contribution in #2462
• @phillebaba made their first contribution in #2473
• @schristoff made their first contribution in #2480

Full Changelog: v0.33.1...v0.33.2

v0.33.1

What's Changed

• fix: add redirect so old zarf base link is compatiable by @AustinAbro321 in #2432
• ci: pin third-party gh actions by hash by @lucasrod16 in #2433
• docs: add redirect for examples by @lucasrod16 in #2438
• docs: update contributing and pre-commit by @Noxsios in #2439
• ci: fix revive image ref in lint workflow by @lucasrod16 in #2436
• fix: filter on running pods when finding an image for injector pod by @lucasrod16 in #2415
• fix: readme dead links by @AustinAbro321 in #2442
• fix: differential package create with non local sources by @AustinAbro321 in #2444
• refactor: move variables into separate package by @Racer159 in #2414
• ci: add top level workflow permission to commitlint by @lucasrod16 in #2449
• ci: remove unused env var from codeql workflow by @lucasrod16 in #2450
• chore: cleanup root level files and add SPDX check for Go files by @Noxsios in #2431
• feat: config to enable resilient registry by @Michael-Kruggel in #2440
• docs: init package clarity and cleanup by @AustinAbro321 in #2447
• ci: compare cves to main by @AustinAbro321 in #2448
• test: unpin version in bigbang extension test by @lucasrod16 in #2459
• fix: broken schema from unexpanded embedded variables by @AustinAbro321 in #2458
• fix: error on create if an index sha is used by @AustinAbro321 in #2429

New Contributors

• @Michael-Kruggel made their first contribution in #2440

Full Changelog: v0.33.0...v0.33.1

v0.33.0

What's Changed

• fix: update deprecated syft packages command to syft scan by @lucasrod16 in #2399
• chore: move helpers to defenseunicorns/pkg by @AustinAbro321 in #2402
• fix(deps): update github.com/anchore/clio digest to fb5fc4c by @renovate in #2366
• feat(tools): add yq by @zachariahmiller in #2406
• chore: switch to use oci lib in defenseunicorns/pkg by @AustinAbro321 in #2404
• fix(deps): update module github.com/defenseunicorns/pkg/helpers to v1 by @renovate in #2411
• fix: use env var for PR title in commitlint workflow to prevent untrusted script injection by @lucasrod16 in #2418
• fix: use default GITHUB_TOKEN for ossf/scorecard-action by @bburky in #2416
• fix: remove duplicate logic for writing image layers to disk concurrently by @lucasrod16 in #2409
• feat: add option to skip cosign lookup during find images by @Racer159 in #2427
• feat: allow chart deploy overrides ALPHA by @naveensrinivasan in #2403
• chore: update pull_request_template.md by @Noxsios in #2428
• ci: pin k3s image version in k3d github action by @lucasrod16 in #2430
• feat(docs): port docs to starlight by @Noxsios in #2315

New Contributors

• @zachariahmiller made their first contribution in #2406
• @bburky made their first contribution in #2416

Full Changelog: v0.32.6...v0.33.0

v0.32.6

[0.32.6] - 2024-03-22

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• [ALPHA] feat: package generation ALPHA by @andrewg-xyz in #2269
• (lib) feat(lib): configurable log file location by @Noxsios in #2380
• [BREAKING] feat!: filter package components with strategy interface by @Noxsios in #2321

🐛 Bug Fixes

• fix: refactor create stages into separate lib by @lucasrod16 in #2223
• fix: handle registry caBundle as a multiline string by @AbrohamLincoln in #2381
• (regression) fix: populate p.sbomViewFiles on deploy and mirror by @lucasrod16 in #2386
• fix: allow absolute paths for differential packages by @AustinAbro321 in #2397
• fix: hotfix skeleton publish by @Noxsios in #2398

🚜 Refactor

• refactor: split helpers/exec libs by @Racer159 in #2379

🧪 Testing

• test: data injection flake by @lucasrod16 in #2361

⚙️ Miscellaneous Tasks

• ci: add commitlint workflow and update contributing guide by @lucasrod16 in #2391

🛡️ Security

• (release) build: create PRs on homebrew-tap by @Noxsios in #2385

Full Changelog: v0.32.5...v0.32.6

v0.32.5

[0.32.5] - 2024-03-11

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

• feat: add missing vendored tool version commands by @eddiezane in #2232
• feat: add --why flag for zarf dev find-images by @waveywaves in #2309
• feat: set variables on find images by @AustinAbro321 in #2282
• feat: add configurable backoff and retries for Zarf operations by @Racer159 in #2345

🐛 Bug Fixes

• (deps): update github.com/anchore/clio digest to abcb719 by @renovate[bot] in #2347
• (ci): change ECR image to docker.io image by @AustinAbro321 in #2353
• fix: added OCI Image Index mediaType by @mdaizcorbe in #2352
• fix: package publish progress bar frozen at zero by @Noxsios in #2367
• (release) hotfix publish not respecting source package architecture by @Noxsios in #2376

📚 Documentation

• chore: fix spelling by @AustinAbro321 in #2333
• docs: formatting and grammar by @beholdenkey in #2350

⚙️ Miscellaneous Tasks

• chore: sorted go imports by @naveensrinivasan in #2349
• chore: fix bb test by @AustinAbro321 in #2340
• chore: update CODEOWNERS with @AustinAbro321 by @Racer159 in #2354
• chore: refactor and purify the OCI library within Zarf by @AustinAbro321 in #2235
• chore: default to temp zarf cache in e2e tests by @AustinAbro321 in #2355

🛡️ Security

• chore: configure agent server to avoid slowloris attack by @naveensrinivasan in #2342
• chore: fix implicit memory aliasing in for loop by @naveensrinivasan in #2341
• (release): update release workflow to use token from gh app by @Noxsios in #2368
• (release): use release environment secrets by @Noxsios in #2374

First Time Contributors

• @eddiezane made their first contribution in #2232
• @beholdenkey made their first contribution in #2350
• @mdaizcorbe made their first contribution in #2352

Full Changelog: v0.32.4...v0.32.5

v0.32.4

What's Changed

Fixes

• Improve cmd failure messaging when no timeout or retries are given by @docandrew in #2301
• Revert init package storageclass checks for git server and seed registry by @lucasrod16 in #2311
• Fix multi-part tarballs being mismatched sizes by @Racer159 in #2314
• Change text template detection to check first and last 512 bytes by @WeaponX314 in #2310
• Improve zarf tools registry prune messaging by @Racer159 in #2323
• Add http request header timeout to mitigate stalling image push by @Racer159 in #2319
• Allow host+subpath as the source registry for --registry-override in package create by @waveywaves in #2306

Dependencies

• Update github.com/anchore/clio digest to cb94e40 by @renovate in #2294, #2297 and #2300
• [security] Update module helm.sh/helm/v3 to v3.14.2 by @renovate in #2307 and #2329
• Update actions/checkout action to v4 by @renovate in #2317
• Update actions/dependency-review-action action to v4 by @renovate in #2318

Docs

• Update Zarf roadmap per 2024 goals by @Racer159 in #2305

Development

• Included Dependency Review action for PR reviews by @naveensrinivasan in #2298
• Resolve CodeQL linting issues across Zarf by @Racer159 in #2322

New Contributors

• @docandrew made their first contribution in #2301
• @naveensrinivasan made their first contribution in #2298
• @waveywaves made their first contribution in #2306

Full Changelog: v0.32.3...v0.32.4

v0.32.3

What's Changed

Fixes

• Properly handle panic that could occur during checksum validation by @mjnagel in #2262
• Add the --key flag to the init cmd to properly allow for signed init packages by @dgershman in #2259
• Restore destroy script functionality during zarf destroy by @Racer159 in #2274
• Fix symlink inclusion within component resources by @dgershman in #2256
• Use memory friendly file split logic for partial packages by @daniel-palmer-gu in #2264
• Fix reproducible tarball creation on Windows systems by @Noxsios in #2293

Docs

• Make branding more consistent and add community meetup references to docs by @Racer159 in #2258

Dependencies

• Update github.com/anchore/clio digest by @renovate in #2277 and #2283
• Update all non-major dependencies (including Gitea v1.21.5, Syft v0.100.0, K9s v0.31.7 and Crane v0.19.0) by @renovate in #2187

Development

• Add a more robust chart search regexManager by @Racer159 in #2278 and #2284
• Partial refactor of injector logic in k8s, and cluster packages by @chrishorton in #2271

New Contributors

• @daniel-palmer-gu made their first contribution in #2264

Full Changelog: v0.32.2...v0.32.3

v0.32.2

What's Changed

Features

• Support authenticated Helm repositories that have been configured with helm repo add by @AustinAbro321 in #2196
• Verify that the specified storage class exists during zarf init by @lucasrod16 in #2180
• Check for available node resources before building injector pod by @chrishorton in #2220
• Officially support yaml extensions within the zarf.yaml using x- keys by @AustinAbro321 in #2217

Fixes

• Fix the inclusion of helm sub commands when rendering zarf tools help by @jbrewer3 in #2216

Docs

• Fix typos in the extension README.md by @mjnagel in #2227
• Fix a small grammatical error in the base README.md by @cmwylie19 in #2219

Dependencies

• Update github.com/anchore/clio digest to 89e2fe8 by @renovate in #2214
• Update github.com/anchore/clio digest to a5e93b6 by @renovate in #2229
• Update github.com/anchore/stereoscope digest to eb656fc by @renovate in #2230

Development

• Remove workflow for automatically adding issues to the zarf project by @YrrepNoj in #2239
• Delete unnecessary waitgroup from concurrencyTools by @AustinAbro321 in #2244
• Update NewOrasRemote to take ocispec.Platform as an argument by @decleaver in #2241

New Contributors

• @jbrewer3 made their first contribution in #2216
• @chrishorton made their first contribution in #2220

Full Changelog: v0.32.1...v0.32.2

v0.32.1

What's Changed

Fixes

• ResolveRoot now properly returns an error when a target platform is not provided when used as a library by @Noxsios in #2212
• Fix reproducibility of internal tarballs for components + sboms to allow better OCI layer reuse by @Noxsios in #2210

Docs

• Remove dos-games skeleton references and instead use the skeleton architecture index by @Noxsios in #2208

Dependencies

• [security] Update github.com/go-git/go-git/v5 to v5.11.0 by @renovate in #2209
• [security] Update github.com/containerd/containerd to v1.7.11 by @renovate in #2209
• Update github.com/anchore/syft to v0.99.0 by @renovate in #2185
• Update github.com/anchore/clio digest to 3e50431 by @renovate in #2207
• Update github.com/anchore/stereoscope digest to 590920d by @renovate in #2206
• Update github/codeql-action action to v3 by @renovate in #2191

Full Changelog: v0.32.0...v0.32.1