Update dependency zarf-dev/zarf to v0.38.3

[renovate]

This PR contains the following updates:

Package	Update	Change
zarf-dev/zarf	minor	v0.37.0 -> v0.38.3
zarf-dev/zarf	minor	0.37.0 -> 0.38.3

---

Release Notes

zarf-dev/zarf (zarf-dev/zarf)

v0.38.3

Compare Source

What's Changed

• fix: linter warnings in new Golang CI version by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2883
• chore(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2871
• chore(deps): bump github/codeql-action from 3.26.0 to 3.26.1 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2881
• test: move oci compose tests that don't need cluster by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2878
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.2 to 4.44.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2870
• refactor: findImages to return errors immediately by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2851
• test: add workflow to make sure importing Zarf works by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2874
• refactor: remove unnecessary retry logic from data injection by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2867
• docs: explain no wait & helm hooks interaction by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2895
• refactor: store managed secrets and add tests by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2892
• chore(deps): bump github/codeql-action from 3.26.1 to 3.26.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2888
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2901
• fix: update injector by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2910
• chore(deps): bump github/codeql-action from 3.26.2 to 3.26.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2916
• fix: update creds not breaking when internal git server not deployed by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2904
• feat: better error message on helm fail by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2914
• ci: increase lint timeout by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2919
• fix: evaulate templates on schema check by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2911
• chore: update workflow to use new key by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2920
• ci: permission at job level by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2922

Full Changelog: zarf-dev/zarf@v0.38.2...v0.38.3

v0.38.2

Compare Source

What's Changed

• chore(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2863
• chore(deps): bump k8s.io/kubectl from 0.30.0 to 0.30.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2862
• ci: add renamed github workflow jobs to the shim workflow by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2858
• test: docker exec to in memory registry by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2869
• fix: replace helpers.Retry with go-retry and adjust delay by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2856
• feat: introduce beta schema by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2859
• refactor: move validate to lint by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2839

Full Changelog: zarf-dev/zarf@v0.38.0...v0.38.2

v0.38.1

Compare Source

What's Changed

• refactor: utilize invopop comment feature by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2781
• fix: detect invalid helm release names by @​jamestexas in https://github.com/zarf-dev/zarf/pull/2784
• refactor: move gitea code to separate package by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2785
• fix: add dependabot and disable renovate features by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2789
• chore(deps): bump github/codeql-action from 3.24.0 to 3.25.15 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2792
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2791
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2793
• chore(deps): bump docker/login-action from 3.0.0 to 3.3.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2794
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2795
• chore(deps): bump k8s.io/component-base from 0.30.0 to 0.30.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2798
• ci: remove unneeded cve checking by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2802
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.43.1 to 4.44.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2799
• chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2808
• chore(deps): bump actions/create-github-app-token from 1.9.0 to 1.10.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2809
• chore(deps): bump actions/download-artifact from 4.1.2 to 4.1.8 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2810
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2807
• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2813
• chore(deps): bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2811
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2806
• fix: resolve CVE-2024-41110 by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2815
• refactor: git package by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2790
• ci: better named gh jobs by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2816
• chore(deps): bump actions/dependency-review-action from 4.1.3 to 4.3.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2822
• chore(deps): bump actions/setup-node from 4.0.2 to 4.0.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2821
• chore: move context.TODO to context.Background() (4) by @​schristoff in https://github.com/zarf-dev/zarf/pull/2749
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.1 to 1.8.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2800
• chore: turn down codecov by @​schristoff in https://github.com/zarf-dev/zarf/pull/2823
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.1 to 1.8.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2812
• refactor: move and test HasImages by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2831
• fix: disk pressure flakes by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2832
• chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2834
• refactor: change isInternal variables to functions by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2768
• chore: update obsolete versions by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2830
• refactor: init zarf state by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2833
• fix: ignore config file not found errors by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2838
• fix: override tunnel details with user-provided settings by @​chaospuppy in https://github.com/zarf-dev/zarf/pull/2841
• refactor: move package generation to a local variable by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2835
• feat: move ZarfPackageConfig to it's own api-versioned package by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2801
• refactor: replace debug logs with returning errors by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2777
• refactor: proxy and add tests by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2843
• chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2848
• chore(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2847
• test: add tests for FindImages by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2850
• test: unit test index sha by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2844
• chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2828
• chore: update dos games by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2845
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.16.0 to 0.17.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2826
• chore(deps): bump github.com/pterm/pterm from 0.12.78 to 0.12.79 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2854
• fix: install grype during release by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2857

New Contributors

• @​jamestexas made their first contribution in https://github.com/zarf-dev/zarf/pull/2784

Full Changelog: zarf-dev/zarf@v0.37.0...v0.38.1

v0.38.0

Compare Source

What's Changed

• refactor: utilize invopop comment feature by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2781
• fix: detect invalid helm release names by @​jamestexas in https://github.com/zarf-dev/zarf/pull/2784
• refactor: move gitea code to separate package by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2785
• fix: add dependabot and disable renovate features by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2789
• chore(deps): bump github/codeql-action from 3.24.0 to 3.25.15 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2792
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2791
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2793
• chore(deps): bump docker/login-action from 3.0.0 to 3.3.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2794
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2795
• chore(deps): bump k8s.io/component-base from 0.30.0 to 0.30.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2798
• ci: remove unneeded cve checking by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2802
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.43.1 to 4.44.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2799
• chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2808
• chore(deps): bump actions/create-github-app-token from 1.9.0 to 1.10.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2809
• chore(deps): bump actions/download-artifact from 4.1.2 to 4.1.8 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2810
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2807
• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2813
• chore(deps): bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2811
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2806
• fix: resolve CVE-2024-41110 by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2815
• refactor: git package by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2790
• ci: better named gh jobs by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2816
• chore(deps): bump actions/dependency-review-action from 4.1.3 to 4.3.4 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2822
• chore(deps): bump actions/setup-node from 4.0.2 to 4.0.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2821
• chore: move context.TODO to context.Background() (4) by @​schristoff in https://github.com/zarf-dev/zarf/pull/2749
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.1 to 1.8.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2800
• chore: turn down codecov by @​schristoff in https://github.com/zarf-dev/zarf/pull/2823
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.1 to 1.8.7 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2812
• refactor: move and test HasImages by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2831
• fix: disk pressure flakes by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2832
• chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2834
• refactor: change isInternal variables to functions by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2768
• chore: update obsolete versions by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2830
• refactor: init zarf state by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2833
• fix: ignore config file not found errors by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2838
• fix: override tunnel details with user-provided settings by @​chaospuppy in https://github.com/zarf-dev/zarf/pull/2841
• refactor: move package generation to a local variable by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2835
• feat: move ZarfPackageConfig to it's own api-versioned package by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2801
• refactor: replace debug logs with returning errors by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2777
• refactor: proxy and add tests by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2843
• chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2848
• chore(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2847
• test: add tests for FindImages by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2850
• test: unit test index sha by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2844
• chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2828
• chore: update dos games by @​AustinAbro321 in https://github.com/zarf-dev/zarf/pull/2845
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.16.0 to 0.17.3 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2826
• chore(deps): bump github.com/pterm/pterm from 0.12.78 to 0.12.79 by @​dependabot in https://github.com/zarf-dev/zarf/pull/2854
• fix: install grype during release by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2857
• fix: import paths to avoid cycle by @​phillebaba in https://github.com/zarf-dev/zarf/pull/2861

New Contributors

• @​jamestexas made their first contribution in https://github.com/zarf-dev/zarf/pull/2784

Full Changelog: zarf-dev/zarf@v0.37.0...v0.38.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.