github.com/zarf-dev/zarf
v0.84.0
#884 most downloaded on Go modules
zarf-dev/zarf
What this package is like to depend on
Last release 2 days ago
21 Aug 2026
Ships on a steady schedule
a new release about every 8 days
Rarely documented
notes for 20 of 110 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
6835 releases · first in 2021
3310 releases in the last 12 months
see the full history below
Release timeline
6835 releases · Mar 2026 to Aug 2026Releases
latest 60 of 6835-
v0.84.1-0.20260821192226-97a1b4d0e9ca21 Aug 2026 pre-releaseNothing published for this version
-
v0.84.1-0.20260821103808-cfa8c441d2c221 Aug 2026 pre-releaseNothing published for this version
-
v0.84.1-0.20260821042101-7d7703ac120e21 Aug 2026 pre-releaseNothing published for this version
-
v0.84.020 Aug 2026Release notes
Open source →0.84.0 (2026-08-20)
⚠ BREAKING CHANGES
- v1beta1: use package definition across public packager functionality (#5173)
Features
- agent: add variable for mutating webhook annotations (#5243) (1de2f08)
- allow excluding ArgoCD and Flux resources from Zarf Agent mutation (#5224) (804b22b)
- dev: evaluate helm chart schemas in dev generate-schema (#5176) (e1ca156)
- injector image flag (#5214) (86d732a)
- introduce zarf dev template (#5206) (826d2a0)
- v1beta1: load v1beta1 packages (#5048) (f82e001)
- v1beta1: use package definition across public packager functionality (#5173) (7a33a42)
Bug Fixes
- add values flags to dev deploy and init (#5234) (fc9226f)
- deprecated schema fields (#5195) (f21f80a)
- negotiate oci scheme for allowing plain http oci endpoints (#5197) (b5fbffa)
- packager.Remove() uses ZarfDefaultTimeout as default timeout (#5253) (11f82f3)
- registry mode not handled properly in update-creds (#5230) (b2a4132)
- replace mimetype with archives (#5228) (a4bfd8a)
Refactoring
What's Changed
🚀 Updates
- chore(main): release 0.84.0 by @zarf-release-please[bot] in #5196
Full Changelog: v0.84.0-rc1...v0.84.0
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.84.0.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
zarf package verify zarf-init-arm64-v0.84.0.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md for details.
Release notes
Open source →⚠ BREAKING CHANGES
- v1beta1: use package definition across public packager functionality (#5173)
Features
- agent: add variable for mutating webhook annotations (#5243) (1de2f08)
- allow excluding ArgoCD and Flux resources from Zarf Agent mutation (#5224) (804b22b)
- dev: evaluate helm chart schemas in dev generate-schema (#5176) (e1ca156)
- injector image flag (#5214) (86d732a)
- introduce zarf dev template (#5206) (826d2a0)
- v1beta1: load v1beta1 packages (#5048) (f82e001)
- v1beta1: use package definition across public packager functionality (#5173) (7a33a42)
Bug Fixes
- add values flags to dev deploy and init (#5234) (fc9226f)
- deprecated schema fields (#5195) (f21f80a)
- negotiate oci scheme for allowing plain http oci endpoints (#5197) (b5fbffa)
- packager.Remove() uses ZarfDefaultTimeout as default timeout (#5253) (11f82f3)
- registry mode not handled properly in update-creds (#5230) (b2a4132)
- replace mimetype with archives (#5228) (a4bfd8a)
Refactoring
-
v0.84.0-rc120 Aug 2026 pre-releaseRelease notes
Open source →What's Changed
🚀 Updates
- fix: deprecated schema fields by @brandtkeller in #5195
- docs(examples): improve longhorn health checks and registry docs by @abhishekgit03 in #5175
- ci: switch from shallow checkout by @brandtkeller in #5198
- feat(v1beta1): load v1beta1 packages by @AustinAbro321 in #5048
- chore(deps): bump astro from 7.0.7 to 7.2.0 in /site by @soltysh in #5209
- feat: injector image flag by @AustinAbro321 in #5214
- feat: introduce zarf dev template by @AustinAbro321 in #5206
- feat(v1beta1)!: use package definition across public packager functionality by @AustinAbro321 in #5173
- chore: bump go version by @brandtkeller in #5229
- fix: add values flags to dev deploy and init by @AustinAbro321 in #5234
- test: add unit coverage for generated SBOM contents by @gangadhar-res in #5222
- fix: replace mimetype with archives by @brandtkeller in #5228
- refactor: move template out of internal by @a1994sc in #5212
- fix: negotiate oci scheme for allowing plain http oci endpoints by @brandtkeller in #5197
- feat: allow excluding ArgoCD and Flux resources from Zarf Agent mutation by @colinlodter in #5224
- feat(dev): evaluate helm chart schemas in dev generate-schema by @mjnagel in #5176
- chore: update mention of values to beta by @brandtkeller in #5246
- chore: update contributing ladder for approval guidance by @brandtkeller in #5245
- feat(agent): add variable for mutating webhook annotations by @AustinAbro321 in #5243
- fix: packager.Remove() uses ZarfDefaultTimeout as default timeout by @curtis-nichols in #5253
- chore: update and lint vex before release by @brandtkeller in #5251
- fix: registry mode not handled properly in update-creds by @Racer159 in #5230
📦 Dependencies
- chore(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.0+incompatible by @dependabot[bot] in #5185
- chore(deps): bump fast-uri from 3.1.4 to 3.1.5 in /site by @dependabot[bot] in #5171
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5200
- chore(deps): bump docker/login-action from 4.5.1 to 4.6.0 by @dependabot[bot] in #5201
- chore(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 by @dependabot[bot] in #5204
- chore(deps): bump github.com/sigstore/sigstore-go from 1.2.2 to 1.3.0 by @dependabot[bot] in #5186
- chore(deps): bump github.com/docker/cli from 29.7.0+incompatible to 29.7.1+incompatible in the docker group across 1 directory by @dependabot[bot] in #5203
- chore(deps): bump mermaid from 10.9.6 to 10.9.8 in /site by @dependabot[bot] in #5187
- chore(deps): bump postcss from 8.5.19 to 8.5.25 in /site by @dependabot[bot] in #5170
- chore(deps): bump js-yaml from 4.2.0 to 4.3.1 in /site by @dependabot[bot] in #5188
- chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /site by @dependabot[bot] in #5194
- chore(deps): bump the cosign-providers group across 1 directory with 4 updates by @dependabot[bot] in #5202
- chore(deps): bump github.com/docker/cli from 29.7.1+incompatible to 29.7.2+incompatible by @dependabot[bot] in #5215
- chore(deps): bump github.com/fairwindsops/pluto/v5 from 5.24.1 to 5.24.3 by @dependabot[bot] in #5221
- chore(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 by @dependabot[bot] in #5216
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5232
- chore(deps): bump github.com/fluxcd/source-controller/api from 1.9.3 to 1.9.4 by @dependabot[bot] in #5233
- chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #5237
- chore(deps): bump github.com/defenseunicorns/pkg/oci from 1.31.1 to 1.32.0 by @AustinAbro321 in #5239
- chore(deps): bump github.com/anchore/syft from 1.50.0 to 1.51.0 by @dependabot[bot] in #5236
- chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 in the golang group across 1 directory by @dependabot[bot] in #5248
New Contributors
- @abhishekgit03 made their first contribution in #5175
- @gangadhar-res made their first contribution in #5222
- @colinlodter made their first contribution in #5224
- @curtis-nichols made their first contribution in #5253
Full Changelog: v0.83.0...v0.84.0-rc1
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.84.0-rc1.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0-rc1" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
zarf package verify zarf-init-arm64-v0.84.0-rc1.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.84.0-rc1" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md for details.
-
v0.83.1-0.20260819190948-1de2f0864e2319 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260819112418-d7a94429180919 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260819030300-eb56bfb1a21719 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260818233507-e1ca1567e5ec18 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260818140803-a4bfd8ad47d118 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260818030115-5127ca0ebb5e18 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260817175131-fc9226fdd5df17 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260814181504-c6d2bed40a3314 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260813222235-a14e5511ed1813 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260811140437-d7f041aaec2211 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260810192133-2f3986cb03d410 Aug 2026 pre-releaseNothing published for this version
-
v0.83.1-0.20260807184205-2083c094800607 Aug 2026 pre-releaseNothing published for this version
-
v0.83.007 Aug 2026Release notes
Open source →0.83.0 (2026-08-07)
⚠ BREAKING CHANGES
- chart naming and expose other useful library functions (#5107)
Features
- add option to skip values schema validation (#5179) (300af24)
- deprecate yolo mode (#5180) (fe4cf8d)
- find-images: exclude images from Helm tests (#5128) (bae3a8c)
- init: more secure pod defaults (#5119) (0351733)
- introduce conversions between API versions (#4823) (af9779e)
- security: support project vulnerability scanning and VEX statements (#5029) (45ba4f1)
- update-creds: separate commands for each service (#5106) (37e071f)
Bug Fixes
- proper binary scan location for nightly cve scan (#5120) (10a199d)
- state access in OnRemove actions (#5156) (8ea4a58)
- verify: honor configured temp dir for embedded trusted root (#5144) (95dcdbe)
- version aware topic assignments for hidden pages (#5108) (79c8ecf)
Refactoring
- chart naming and expose other useful library functions (#5107) (d50162d)
- fix flakey tests (#5155) (348fda4)
What's Changed
🚀 Updates
- chore(main): release 0.83.0 by @zarf-release-please[bot] in #5112
Full Changelog: v0.83.0-rc2...v0.83.0
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.83.0.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
zarf package verify zarf-init-arm64-v0.83.0.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md for details.
Release notes
Open source →⚠ BREAKING CHANGES
- chart naming and expose other useful library functions (#5107)
Features
- add option to skip values schema validation (#5179) (300af24)
- deprecate yolo mode (#5180) (fe4cf8d)
- find-images: exclude images from Helm tests (#5128) (bae3a8c)
- init: more secure pod defaults (#5119) (0351733)
- introduce conversions between API versions (#4823) (af9779e)
- security: support project vulnerability scanning and VEX statements (#5029) (45ba4f1)
- update-creds: separate commands for each service (#5106) (37e071f)
Bug Fixes
- proper binary scan location for nightly cve scan (#5120) (10a199d)
- state access in OnRemove actions (#5156) (8ea4a58)
- verify: honor configured temp dir for embedded trusted root (#5144) (95dcdbe)
- version aware topic assignments for hidden pages (#5108) (79c8ecf)
Refactoring
-
v0.83.0-rc207 Aug 2026 pre-releaseRelease notes
Open source →What's Changed
🚀 Updates
- refactor: fix flakey tests by @AustinAbro321 in #5155
Full Changelog: v0.83.0-rc1...v0.83.0-rc2
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.83.0-rc2.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0-rc2" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
zarf package verify zarf-init-arm64-v0.83.0-rc2.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0-rc2" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md for details.
-
v0.83.0-rc106 Aug 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260806030610-b85e439b8aad06 Aug 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260805030429-69f1fd0fed0205 Aug 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260803114514-ca66f561e9c803 Aug 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260803030923-a65539d4250503 Aug 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260802040817-3a16b306d9a502 Aug 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260731213632-89804ce910f331 Jul 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260731023355-155e3c808a5031 Jul 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260729222212-10a199da3ee329 Jul 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260729124115-37e071f43c8629 Jul 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260729023414-6381424c492929 Jul 2026 pre-releaseNothing published for this version
-
v0.82.1-0.20260728045738-13ed2a5382b328 Jul 2026 pre-releaseNothing published for this version
-
v0.82.023 Jul 2026Release notes
Open source →0.82.0 (2026-07-23)
⚠ BREAKING CHANGES
- values: type inference in set-values cli parsing (#5103)
Features
- expose GetComponent function for package templating (#5092) (c1f0624)
- healthchecks: use namespace-scoped watches for improved permissions handling (#5091) (5e2e9be)
- schema: support multiple API versions from a single schema file (#4949) (f6d5cdd)
- stop requiring version for localpath charts (#5080) (82ec120)
- values: type inference in set-values cli parsing (#5103) (fe2da73)
Bug Fixes
What's Changed
🚀 Updates
- chore(main): release 0.82.0 by @zarf-release-please[bot] in #5085
Full Changelog: v0.82.0-rc1...v0.82.0
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.82.0.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.82.0" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
zarf package verify zarf-init-arm64-v0.82.0.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.82.0" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md for details.
Release notes
Open source →⚠ BREAKING CHANGES
- values: type inference in set-values cli parsing (#5103)
Features
- expose GetComponent function for package templating (#5092) (c1f0624)
- healthchecks: use namespace-scoped watches for improved permissions handling (#5091) (5e2e9be)
- schema: support multiple API versions from a single schema file (#4949) (f6d5cdd)
- stop requiring version for localpath charts (#5080) (82ec120)
- values: type inference in set-values cli parsing (#5103) (fe2da73)
Bug Fixes
-
v0.82.0-rc123 Jul 2026 pre-releaseRelease notes
Open source →What's Changed
🚀 Updates
- fix: agent webhook logs by @AustinAbro321 in #5081
- feat: stop requiring version for localpath charts by @AustinAbro321 in #5080
- chore: initial AGENTS.md file by @brandtkeller in #5068
- feat(schema): support multiple API versions from a single schema file by @AustinAbro321 in #4949
- docs: update command from 'prepare' to 'dev' in tutorial command html by @codydacosta-uds in #5089
- feat(healthchecks): use namespace-scoped watches for improved permissions handling by @corang in #5091
- docs: package values overview and migration guide by @AustinAbro321 in #5090
- feat: expose GetComponent function for package templating by @AustinAbro321 in #5092
- fix(injection): support retry for toomanyrequests by @brandtkeller in #5095
- ci: remove import test by @AustinAbro321 in #5105
- feat(values)!: type inference in set-values cli parsing by @AustinAbro321 in #5103
📦 Dependencies
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #5083
- chore(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2 by @dependabot[bot] in #5084
- chore(deps): bump esbuild, @astrojs/starlight and astro in /site by @dependabot[bot] in #5065
- chore(deps-dev): bump brace-expansion from 5.0.6 to 5.0.7 in /site by @dependabot[bot] in #5088
New Contributors
- @codydacosta-uds made their first contribution in #5089
Full Changelog: v0.81.1...v0.82.0-rc1
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
zarf package verify zarf-init-amd64-v0.82.0-rc1.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.82.0-rc1" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
zarf package verify zarf-init-arm64-v0.82.0-rc1.tar.zst \ --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.82.0-rc1" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md for details.
-
v0.81.2-0.20260723175818-77da54ce264023 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723174419-dc1b72078f0223 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723155046-4898124a407c23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723153720-839697b76e8623 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723152928-0acea7c7c79023 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723152129-6f6c7457536b23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723152000-e4b6a75bc18523 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723130025-cda40e9f679223 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723125428-2128624a4b4b23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723123635-48a4ead2d57323 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723064321-46e1e4567c7c23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723064224-87a000b685fa23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723064220-f6fb1fbda08f23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723064220-536822d438b923 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723064216-333df27eb95f23 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260723013843-4f4cc85551d523 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722235936-a9f9c5cc351d22 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722220555-bf88d85139e622 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722195536-960b0fb8403822 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722192352-da7d2a88b0af22 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722185432-18993e319a1622 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722180854-bc3a8709bdbf22 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722174658-a99d7ad5c0aa22 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722171535-890a90f0573722 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722170804-57e32e36e96d22 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722165906-2ae0e0a553c422 Jul 2026 pre-releaseNothing published for this version
-
v0.81.2-0.20260722163432-c1f06247789a22 Jul 2026 pre-releaseNothing published for this version