What's Changed

• feat(next): add bundle deployment timeout and Zarf retry options by @chance-coleman in #1625

Full Changelog: v0.41.0-snapshot+20261105031242-3190b8d5...v0.41.0-snapshot+20261106031301-cb093d7b

0.41.0 (2026-11-03)

⚠ BREAKING CHANGES

• Legacy Go integrations must use Zarf's api.Package and api.Component types for package readers and fetchers. CLI commands and Next public APIs remain compatible.

Features

• add Zarf package disassembly/reassembly flows (#1520) (60c5cfb)
• bundle: prepare deploy source from read-only oras target (#1623) (18cae3b)
• support Zarf beta schemas in both CLI modes (74b2549)

Bug Fixes

• testsuite fixed for the release (#1629) (7f7b7d0)

Miscellaneous

• deps: update application-deps (#1612) (f3c72f2)
• deps: update support-deps (#1620) (1d77910)
• deps: update zarf to v0.89.0 (#1624) (a6d26b3)

What's Changed

• feat: add Zarf package disassembly/reassembly flows by @Racer159 in #1520
• feat!: support Zarf beta schemas in both CLI modes by @slaskawi in #1621
• chore(deps): update zarf to v0.89.0 by @renovate[bot] in #1624
• chore(deps): update support-deps by @renovate[bot] in #1620
• chore(deps): update application-deps by @renovate[bot] in #1612
• feat(bundle): prepare deploy source from read-only oras target by @chance-coleman in #1623
• fix: testsuite fixed for the release by @slaskawi in #1629
• chore(main): release 0.41.0 by @github-actions[bot] in #1622

Full Changelog: v0.40.0...v0.41.0

What's Changed

• feat!: support Zarf beta schemas in both CLI modes by @slaskawi in #1621
• chore(deps): update zarf to v0.89.0 by @renovate[bot] in #1624
• chore(deps): update support-deps by @renovate[bot] in #1620
• chore(deps): update application-deps by @renovate[bot] in #1612
• feat(bundle): prepare deploy source from read-only oras target by @chance-coleman in #1623
• fix: testsuite fixed for the release by @slaskawi in #1629
• chore(main): release 0.41.0 by @github-actions[bot] in #1622

Full Changelog: v0.40.0-snapshot+20261101031443-60c5cfbc...v0.41.0-snapshot+20261105031242-3190b8d5

What's Changed

• feat!: support Zarf beta schemas in both CLI modes by @slaskawi in #1621
• chore(deps): update zarf to v0.89.0 by @renovate[bot] in #1624
• chore(deps): update support-deps by @renovate[bot] in #1620
• chore(deps): update application-deps by @renovate[bot] in #1612
• feat(bundle): prepare deploy source from read-only oras target by @chance-coleman in #1623
• fix: testsuite fixed for the release by @slaskawi in #1629
• chore(main): release 0.41.0 by @github-actions[bot] in #1622

Full Changelog: v0.40.0-snapshot+20261101031443-60c5cfbc...v0.41.0-snapshot+20261104031224-3190b8d5

0.40.0 (2026-10-21)

⚠ BREAKING CHANGES

• deps: Zarf package creation now packages symlink target contents, including files outside the source tree, and fails on dangling links. Review symlinks before rebuilding packages. Additionally, UDS CLI library users who access Zarf package definitions through deployment hooks or custom loaders may need to update their code for Zarf v0.88’s public API changes.

Features

• add a skill for migrating legacy bundle manifests to Bundles Next HCL (#1544) (01f8d23)
• allow configuring injector image on init (#1614) (6c30541)
• skip architecture check (#1615) (53483c0)

Miscellaneous

• bump go versions in go.mod and mise.toml (#1618) (00137a9)
• deps: update application dependencies to v0.24.0 (#1596) (7a70538)
• deps: update application-deps (#1600) (786c023)
• deps: update support-deps (#1588) (5b724fb)
• deps: update support-deps (#1593) (a53fb24)
• deps: update support-deps (#1597) (340607a)
• deps: update support-deps (#1608) (0edac8b)
• deps: update support-deps (#1610) (e9f80a2)
• deps: update support-deps (#1619) (84a694c)
• deps: update support-deps to v1.15.0 (#1609) (ca56bbe)
• deps: update zarf to v0.88.0 (435df5f)
• deps: upgrade golang.org/x/net to v0.60.0 (d05b8af)

What's Changed

• chore(deps): update support-deps by @renovate[bot] in #1588
• docs: add doc for init customization by @mjnagel in #1595
• chore(deps): update application dependencies to v0.24.0 by @renovate[bot] in #1596
• chore(deps): update support-deps by @renovate[bot] in #1593
• fix(deps): upgrade golang.org/x/net to v0.60.0 by @bradclawsie in #1607
• chore(deps): update application-deps by @renovate[bot] in #1600
• chore(deps): update support-deps by @renovate[bot] in #1597
• chore(deps): update support-deps by @renovate[bot] in #1608
• chore(deps): update support-deps to v1.15.0 by @renovate[bot] in #1609
• feat: add a skill for migrating legacy bundle manifests to Bundles Next HCL by @bradclawsie in #1544
• feat: allow configuring injector image on init by @AustinAbro321 in #1614
• chore(deps): update zarf to v0.88.0 by @renovate[bot] in #1613
• feat: skip architecture check by @eoghanriley in #1615
• chore(deps): update support-deps by @renovate[bot] in #1610
• chore(deps): update support-deps by @renovate[bot] in #1619
• chore: bump go versions in go.mod and mise.toml by @jasonwashburn in #1618
• chore(main): release 0.40.0 by @github-actions[bot] in #1592

Full Changelog: v0.39.0...v0.40.0

0.39.0 (2026-10-06)

⚠ BREAKING CHANGES

• deps: Zarf v0.87 breaking changes. See: https://github.com/zarf-dev/zarf/releases/tag/v0.87.0 (#1585) (ee139b9)

Features

• bundle: add resume support to deploy (#1559) (d13efe4)
• next: override config vars via cli (#1564) (968a153)

Bug Fixes

• next: improve local artifact inspection performance (#1579) (8af3b5e)
• revert release 0.39.0 (#1589) (79c2c58)

Miscellaneous

• ci: validate Renovate configuration (#1587) (ded5010)
• deps: update application-deps (#1568) (7b85112)
• deps: update application-deps to v0.37.1 (#1582) (05a627e)
• deps: update support dependencies to v2026.9.12 (#1572) (11e098a)
• deps: update support dependencies to v4.38.1 (#1571) (cbc46e1)
• deps: update support-deps (#1567) (a0ed934)
• deps: update support-deps (#1578) (d2f27f0)
• deps: update support-deps (#1581) (a982a99)
• deps: update support-deps (#1583) (469e28e)
• deps: update support-deps (#1584) (1a98aa9)
• deps: update zarf to v0.87.0 (#1585) (ee139b9)
• main: release 0.39.0 (#1570) (7df22a8)
• next: standardize using zarf helpers for parsing (#1577) (2de35de)
• update uds-k3d to 0.21.2 (#1591) (053d9c9)

What's Changed

• chore(deps): update application-deps by @renovate[bot] in #1568
• chore(deps): update support-deps by @renovate[bot] in #1567
• chore(deps): update support dependencies to v4.38.1 by @renovate[bot] in #1571
• feat(next): override config vars via cli by @eoghanriley in #1564
• test: cement Next public API contracts by @slaskawi in #1569
• chore(deps): update support dependencies to v2026.9.12 by @renovate[bot] in #1572
• feat(bundle): add resume support to deploy by @slaskawi in #1559
• chore(deps): update support-deps by @renovate[bot] in #1578
• chore(deps): update application-deps to v0.37.1 by @renovate[bot] in #1582
• chore(deps): update support-deps by @renovate[bot] in #1581
• chore(next): standardize using zarf helpers for parsing by @eoghanriley in #1577
• fix(next): improve local artifact inspection performance by @eoghanriley in #1579
• chore(deps): update support-deps by @renovate[bot] in #1583
• chore(ci): validate Renovate configuration by @slaskawi in #1587
• chore(deps)!: update zarf to v0.87.0 by @renovate[bot] in #1585
• chore(deps): update support-deps by @renovate[bot] in #1584
• chore(main): release 0.39.0 by @github-actions[bot] in #1570
• fix: revert release 0.39.0 by @bradclawsie in #1589
• chore: update uds-k3d to 0.21.2 by @bradclawsie in #1591
• chore(main): release 0.39.0 by @github-actions[bot] in #1590

Full Changelog: v0.38.0...v0.39.0

0.38.0 (2026-09-18)

⚠ BREAKING CHANGES

• next: split remove into 2 commands (#1545)

Features

• next: split remove into 2 commands (#1545) (6160987)

Bug Fixes

• improve error for missing unsigned pkg deploy flag (#1560) (cf4cde1)
• legacy: don't print full bundle config in debug log message (#1557) (f594cde)
• narrow error check and message to only unsigned bundles (#1563) (a507542)
• require --architecture to be non-empty (#1552) (4609795)

Miscellaneous

• ci: add check to verify vendored dependencies (#1551) (37bdfa2)
• deps: update application-deps, update zarf to v0.86.0 (#1542) (91302e7)
• deps: update support dependencies to v1.28.2 (#1548) (909542c)
• deps: update support dependencies to v2026.9.10 (#1561) (932bf1a)
• deps: update support dependencies to v2026.9.5 (#1550) (e18db51)
• deps: update support dependencies to v2026.9.9 (#1556) (c64fdbc)
• deps: update support dependencies to v4.4.0 (#1566) (f941dd7)
• deps: update support-deps (#1543) (a021015)
• deps: update support-deps (#1547) (7c5ee3c)
• deps: update support-deps (#1549) (41da334)
• deps: update support-deps (#1554) (4679fc1)
• deps: update support-deps (#1558) (f5fdfd9)
• deps: update support-deps (#1565) (d98b9df)
• deps: update support-deps to v1.13.0 (#1562) (3ac25f6)
• next: adr about the implementation of uds tools (#1541) (e6498cb)

What's Changed

• chore(deps): update support-deps by @renovate[bot] in #1543
• chore(deps): update support-deps by @renovate[bot] in #1547
• docs(next): document bundle config and artifact signing workflows by @chance-coleman in #1540
• chore(deps): update support dependencies to v1.28.2 by @renovate[bot] in #1548
• chore(deps): update support-deps by @renovate[bot] in #1549
• chore(deps): update support dependencies to v2026.9.5 by @renovate[bot] in #1550
• fix: require --architecture to be non-empty by @bradclawsie in #1552
• chore(next): adr about the implementation of uds tools by @eoghanriley in #1541
• chore(ci): add check to verify vendored dependencies by @jasonwashburn in #1551
• chore(deps): update support-deps by @renovate[bot] in #1554
• feat(next)!: split remove into 2 commands by @eoghanriley in #1545
• chore(deps): update support dependencies to v2026.9.9 by @renovate[bot] in #1556
• fix(legacy): don't print full bundle config in debug log message by @joelmccoy in #1557
• chore(deps): update support-deps by @renovate[bot] in #1558
• chore(deps): update support dependencies to v2026.9.10 by @renovate[bot] in #1561
• chore(deps): update support-deps to v1.13.0 by @renovate[bot] in #1562
• fix: improve error for missing unsigned pkg deploy flag by @bradclawsie in #1560
• fix: narrow error check and message to only unsigned bundles by @bradclawsie in #1563
• chore(deps): update support-deps by @renovate[bot] in #1565
• chore(deps): update support dependencies to v4.4.0 by @renovate[bot] in #1566
• chore(deps): update application-deps by @renovate[bot] in #1542
• chore(main): release 0.38.0 by @github-actions[bot] in #1546

Full Changelog: v0.37.0...v0.38.0

0.37.0 (2026-09-08)

⚠ BREAKING CHANGES

• next: operator monitor command (#1528)
• keep CLI features out of Zarf tools (#1525)
• next: artifact support for remove (#1477)

Features

• add release-please (#1536) (14e8260)
• next: artifact support for remove (#1477) (6293c41)
• next: operator monitor command (#1528) (9b8a6b0)
• release: align snapshot releases with CLI Next (#1521) (762b914)

Bug Fixes

• deps: update application-deps (#1529) (ebe08bc)
• fixing dev-docs paths (#1526) (f3c2903)
• gitleaks shall ignore uds-docs (#1527) (fb6677c)
• keep CLI features out of Zarf tools (#1525) (54f47d3)
• legacy: preserve --set overrides after config reload (#1533) (7e12795)

Miscellaneous

• configure Renovate for vendored dependencies (#1499) (caa08ea)
• deps: update support dependencies to v2026.9.1 (#1534) (d788c8a)
• deps: update support-deps (#1452) (bdb5643)
• deps: update support-deps (#1532) (06cdc3b)
• deps: update support-deps (#1537) (c283fdd)
• deps: update zarf to v0.84.0 (#1475) (c6c38ed)
• deps: update zarf to v0.85.0 (#1538) (3c6b085)
• docs: add ai guidance (#1471) (4eb05e5)
• docs: add cli next docs how to guides (#1523) (6365ecc)
• docs: choosing a deployment tool doc (#1522) (04d27f7)

What's Changed

• chore(deps): update zarf to v0.85.0 by @renovate[bot] in #1538
• feat(release): align snapshot releases with CLI Next by @slaskawi in #1521
• chore(main): release 0.37.0 by @github-actions[bot] in #1539

New Contributors

• @github-actions[bot] made their first contribution in #1539

Full Changelog: nightly-unstable...v0.37.0

Nightly unstable build

What's Changed

• docs: clarify bundle values and variables by @slaskawi in #1457
• chore: refactor test workflows by @joelmccoy in #1453
• refactor(CLI-269)!: prepare repository for CLI modes by @slaskawi in #1458
• chore: add go mod tidy to hk/lint checks by @joelmccoy in #1462
• feat: import uds-cli-next source code by @joelmccoy in #1461
• feat: enable uds cli next mode by @joelmccoy in #1463
• chore(ci): wire up next integration tests by @joelmccoy in #1464
• fix(mise): mise install jq by @bradclawsie in #1470
• chore(docs): add cli next mode docs by @joelmccoy in #1466
• feat(next)!: align ZarfPackageLayout with upstream PackageLayout by @eoghanriley in #1472
• feat(next)!: artifact support for remove by @eoghanriley in #1469
• Revert "feat(next)!: artifact support for remove" by @eoghanriley in #1474
• chore(deps): update zarf to v0.84.0 by @slaskawi in #1468
• fix(deps): update application-deps by @renovate[bot] in #1451

New Contributors

• @slaskawi made their first contribution in #1457
• @eoghanriley made their first contribution in #1472

Full Changelog: v0.35.1...v0.36.0