# Zarf 1.0 adds package verification and configuration changes for offline deployments

_Published Monday, November 9, 2026 at 9:08 AM EST · Security, Infrastructure · Latest · Tier 2 — Notable_

Defense Unicorns released Zarf 1.0, adding stronger package signing and verification workflows to software delivery for environments disconnected from the internet, its maintainer announced through OpenSSF. Zarf packages applications, dependencies, provenance and signatures for deployment and updates.

The release introduces the v1beta1 package schema, including component publishing for imports and simpler package templates. It replaces configuration variables with structured values that support nested data and standard Go templating. Existing package creators face a configuration transition; the release includes a migration guide and conversion tooling.

## Sources

- [Open Source Security Foundation](https://openssf.org/blog/2026/11/09/announcing-zarf-1-0-security-and-stability-for-airgap-software-delivery/)

---
Canonical: https://techandbusiness.org/newswire/8kp3NPVue0PNllxS4waETA
Published: 2026-11-09T14:08:34.059Z
Story chronology: 2026-11-09T14:01:14.000Z
Retrieved: 2026-11-09T16:56:47.720Z
Publisher: Tech & Business (techandbusiness.org)