[renovate]

This PR contains the following updates:

Package	Update	Change
zarf-dev/zarf	minor	v0.87.0 → v0.88.0

---

Release Notes

zarf-dev/zarf

v0.88.0

Compare Source

⚠ BREAKING CHANGES

• layout: materialize symlinks on package creation (#​5462)
• create: isolate and enforce filepaths to layout directory (#​5446)
• make component services an object (#​5471)
• cleanup v1beta1 edge cases and add e2e test (#​5443)
• implement find images for v1beta1 package and component config (#​5428)

Features

• add ability to skip arch check on package deploy (#​5451) (16461d4)
• add init chart values schemas (#​5347) (4c238cc)
• cleanup v1beta1 edge cases and add e2e test (#​5443) (02264d6)
• get-creds: only print credentials for configured services (#​5418) (1f4b42a)
• implement find images for v1beta1 package and component config (#​5428) (a12d5ab)
• implement zarf dev generate-schema for v1beta1 packages and component configs (#​5442) (562f5c0)
• implement zarf dev lint for v1beta1 packages and component configs (#​5431) (c3c98c1)
• introduce v1beta1 init config (#​5427) (9ce3715)
• layout: materialize symlinks on package creation (#​5462) (1cc76b0)
• make component services an object (#​5471) (16f1a7c)
• unhide v1beta1 commands and add feature flag (#​5460) (7387b24)
• v1beta1 and component config zarf dev inspect implementations (#​5438) (2430007)
• v1beta1: honor image sources (#​5394) (5062461)
• v1beta1: sha256/sha512 verification checksum verification (#​5399) (0e61e0e)

Bug Fixes

• create: isolate and enforce filepaths to layout directory (#​5446) (b3f2f8e)
• preserve healthcheck result during watcher cancellation (#​5437) (5222087)
• prevent cache race from causing errors in concurrent zarf process OCI package loads (#​5439) (ef88af0)

What's Changed

🚀 Updates

• chore(main): release 0.88.0 by @​zarf-release-please[bot] in #​5429

Full Changelog: zarf-dev/zarf@v0.88.0-rc1...v0.88.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.88.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.88.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.88.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.88.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.