fix(deps): update zarf to v0.80.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/zarf-dev/zarf	v0.78.0 → v0.80.0			require	minor
zarf-dev/zarf	0.78.0 → 0.80.0				minor
zarf-dev/zarf	v0.78.0 → v0.80.0				minor

---

Release Notes

zarf-dev/zarf (github.com/zarf-dev/zarf)

v0.80.0

Compare Source

⚠ BREAKING CHANGES

• add a digest to zarf package state and a digest inspect command (#​4993)
• schema: zarf dev schema-generate from existing values (#​4961)

Features

• add a digest to zarf package state and a digest inspect command (#​4993) (62b0d8d)
• package: support verification on all CLI package load operations (#​4996) (ee2ddd9)
• schema: zarf dev schema-generate from existing values (#​4961) (d1f8d48)
• viper: support viper configuration for sign/verify (#​4946) (887b0b8)

What's Changed

🚀 Updates

• chore(main): release 0.80.0 by @​zarf-release-please[bot] in #​4991

Full Changelog: zarf-dev/zarf@v0.80.0-rc1...v0.80.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.80.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.80.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.80.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.80.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

v0.79.0

Compare Source

⚠ BREAKING CHANGES

• values: expose pkg built in (#​4981)

Features

• injector: dynamically determine host based on IP family (#​4985) (8ef592c)
• values: expose pkg built in (#​4981) (1e7e767)

Bug Fixes

• docs: render markdown tables (#​4982) (c96636e)
• pull: always pull values.yaml and values.schema.json (#​4987) (78ac28e)

What's Changed

🚀 Updates

• chore(main): release 0.79.0 by @​zarf-release-please[bot] in #​4984

Full Changelog: zarf-dev/zarf@v0.79.0-rc1...v0.79.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.79.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.79.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.79.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.79.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26.0 -> 1.26.4