0.83.0 (2026-08-07)
⚠ BREAKING CHANGES
- chart naming and expose other useful library functions (#5107)
Features
- add option to skip values schema validation (#5179) (300af24)
- deprecate yolo mode (#5180) (fe4cf8d)
- find-images: exclude images from Helm tests (#5128) (bae3a8c)
- init: more secure pod defaults (#5119) (0351733)
- introduce conversions between API versions (#4823) (af9779e)
- security: support project vulnerability scanning and VEX statements (#5029) (45ba4f1)
- update-creds: separate commands for each service (#5106) (37e071f)
Bug Fixes
- proper binary scan location for nightly cve scan (#5120) (10a199d)
- state access in OnRemove actions (#5156) (8ea4a58)
- verify: honor configured temp dir for embedded trusted root (#5144) (95dcdbe)
- version aware topic assignments for hidden pages (#5108) (79c8ecf)
Refactoring
- chart naming and expose other useful library functions (#5107) (d50162d)
- fix flakey tests (#5155) (348fda4)
What's Changed
🚀 Updates
- chore(main): release 0.83.0 by @zarf-release-please[bot] in https://github.com/zarf-dev/zarf/pull/5112
Full Changelog: https://github.com/zarf-dev/zarf/compare/v0.83.0-rc2...v0.83.0
Verifying Init Packages
The init packages in this release are signed with keyless Sigstore signing. Verify with:
amd64:
:::bash
zarf package verify zarf-init-amd64-v0.83.0.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"
arm64:
:::bash
zarf package verify zarf-init-arm64-v0.83.0.tar.zst \
--certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.83.0" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"
See RELEASES.md (github.com) for details.
