chore(deps): update zarf to v0.85.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
ghcr.io/zarf-dev/packages/init		minor	v0.83.0 → v0.85.0
ghcr.io/zarf-dev/packages/init		minor	v0.84.0 → v0.85.0
github.com/zarf-dev/zarf	require	minor	v0.84.0 → v0.85.0
zarf-dev/zarf		minor	0.84.0 → 0.85.0
zarf-dev/zarf		minor	v0.84.0 → v0.85.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

zarf-dev/zarf (github.com/zarf-dev/zarf)

v0.85.0

Compare Source

⚠ BREAKING CHANGES

• publish v1beta1 component configs (#​5219)

Features

• add index and count to deploy (#​4170) (ba50b87)
• add oci source auto-prefixing (#​5273) (9a41b0d)
• helm: support allowable errors for helm chart retries (#​5287) (cdb212b)
• publish v1beta1 component configs (#​5219) (abd07dd)
• warn on image push failure (#​5268) (258fa9e)
• zoci: add transport parameter to NewRemoteWithOptions (#​5260) (97a1b4d)

Bug Fixes

• helm: ensure retrieval of latest release (#​5295) (5977f2d)
• pass remote options when loading OCI init packages (#​5265) (4e14f8b)
• support platform flag entries for crane copy (#​5280) (81fedb2)

Refactoring

• state: move agent information into a sub-struct (#​5269) (e702d1c)

What's Changed

🚀 Updates

• chore(main): release 0.85.0 by @​zarf-release-please[bot] in #​5263

Full Changelog: zarf-dev/zarf@v0.85.0-rc1...v0.85.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.85.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.85.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.85.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.85.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated

Details:

Package	Change
github.com/mikefarah/yq/v4	v4.53.3 -> v4.53.6
github.com/sirupsen/logrus	v1.9.4 -> v1.10.2
go.yaml.in/yaml/v4	v4.0.0-rc.4 -> v4.0.0-rc.6
k8s.io/cli-runtime	v0.36.3 -> v0.36.4
k8s.io/component-base	v0.36.3 -> v0.36.4
k8s.io/component-helpers	v0.36.3 -> v0.36.4
k8s.io/kubectl	v0.36.3 -> v0.36.4
k8s.io/metrics	v0.36.3 -> v0.36.4
k8s.io/streaming	v0.36.4 -> v0.37.0
k8s.io/utils	v0.0.0-20260507154919-ff6756f316d2 -> v0.0.0-20260626114624-be93311217bd

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.