What's Changed Exciting New Features 🎉 Update artifact_accessory to add source column to identify accessory by @stonezdj in #23144 feat: replace redis with valkey as cache backend by @chlins in #23157 Full Multi-Architecture Enablement for Harbor (amd64 + arm64) by @ranimandepudi in #22311 Add ListReferrers API to registry client and update parseScopes by @stonezdj in #23170 Proxy the referrer API…
What's Changed Component updates ⬆️ bump base version for v2.14.6 by @wy65701436 in #24115 Release 2.14 bump go trivy distribution by @wy65701436 in #24122 fix(webhook): allow private network access by default (#24082) by @wy65701436 in #24129 fix(prepare): expose the legacy signer pull switch in harbor.yml (#24… by @wy65701436 in #24130 Cherry pick upload location origin 2.14 (#24114) by @wy65701…
What's Changed Component updates ⬆️ bump base version for v2.14.6 by @wy65701436 in #24115 Release 2.14 bump go trivy distribution by @wy65701436 in #24122 fix(webhook): allow private network access by default (#24082) by @wy65701436 in #24129 fix(prepare): expose the legacy signer pull switch in harbor.yml (#24… by @wy65701436 in #24130 Cherry pick upload location origin 2.14 (#24114) by @wy65701…
What's Changed Component updates ⬆️ bump base version for v2.14.6 by @wy65701436 in #24115 Release 2.14 bump go trivy distribution by @wy65701436 in #24122 fix(webhook): allow private network access by default (#24082) by @wy65701436 in #24129 fix(prepare): expose the legacy signer pull switch in harbor.yml (#24… by @wy65701436 in #24130 Cherry pick upload location origin 2.14 (#24114) by @wy65701…
What's Changed Component updates ⬆️ fix(webhook): allow private network access by default by @Vad1mo in #24082 fix(contenttrust): allow legacy signer pull by default to avoid regre… by @wy65701436 in #24086 fix(prepare): expose the legacy signer pull switch in harbor.yml by @bupd in #24101 Cherry pick upload location origin 2.15 by @wy65701436 in #24114 Bump Component Version 🤖 Bump trivy(0.75.0)…
What's Changed Component updates ⬆️ fix(webhook): allow private network access by default by @Vad1mo in #24082 fix(contenttrust): allow legacy signer pull by default to avoid regre… by @wy65701436 in #24086 fix(prepare): expose the legacy signer pull switch in harbor.yml by @bupd in #24101 Cherry pick upload location origin 2.15 by @wy65701436 in #24114 Bump Component Version 🤖 Bump trivy(0.75.0)…
WarningBreaking change: webhooks to internal addresses are blocked by default The fix for GHSA-2phj-cp9f-qq6w blocks webhook and Slack delivery to private, loopback, link-local and other non-public addresses. That includes hostnames that resolve to them, such as *.svc.cluster.local. After you upgrade, existing webhooks to internal endpoints fail to deliver, and new ones are rejected. To allow them…
WarningBreaking change: webhooks to internal addresses are blocked by default The fix for GHSA-2phj-cp9f-qq6w blocks webhook and Slack delivery to private, loopback, link-local and other non-public addresses. That includes hostnames that resolve to them, such as *.svc.cluster.local. After you upgrade, existing webhooks to internal endpoints fail to deliver, and new ones are rejected. To allow them…
WarningBreaking change: webhooks to internal addresses are blocked by default The fix for GHSA-2phj-cp9f-qq6w blocks webhook and Slack delivery to private, loopback, link-local and other non-public addresses. That includes hostnames that resolve to them, such as *.svc.cluster.local. After you upgrade, existing webhooks to internal endpoints fail to deliver, and new ones are rejected. To allow them…
What's Changed Component updates ⬆️ (cherry-pick) fix: avoid panic in user audit event resolver on nil event data (#23461) by @Aloui-Ikram in #23501 (cherry-pick) fix: Constrain /registries/ping to the saved URL for existing registries (#23463) by @Aloui-Ikram in #23502 (cherry-pick) Add a size limit for manifest uploads by @Aloui-Ikram in #23503 cherry-pick: fix(ui): use dark login background in…
What's Changed Component updates ⬆️ (cherry-pick) fix: avoid panic in user audit event resolver on nil event data (#23461) by @Aloui-Ikram in #23501 (cherry-pick) fix: Constrain /registries/ping to the saved URL for existing registries (#23463) by @Aloui-Ikram in #23502 (cherry-pick) Add a size limit for manifest uploads by @Aloui-Ikram in #23503 cherry-pick: fix(ui): use dark login background in…
Upgrade Notice: Internal PostgreSQL Upgrade Upgrading to Harbor v2.15.2 (Helm Chart v1.19.2) automatically updates the bundled internal database from PostgreSQL 15 to PostgreSQL 18 via pg_upgrade upon container startup. Action Items & Considerations Backup Data: Back up your database before applying the upgrade or restarting the database pod. Maintenance Downtime: pg_upgrade runs on pod startup an…
What's Changed Component updates ⬆️ [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in #23221 bump Go version from 1.25.9 to 1.26.3 by @stonezdj in #23236 [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in #23250 [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in #23267…
What's Changed Component updates ⬆️ [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in #23221 bump Go version from 1.25.9 to 1.26.3 by @stonezdj in #23236 [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in #23250 [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in #23267…
What's Changed Component updates ⬆️ [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in #23221 bump Go version from 1.25.9 to 1.26.3 by @stonezdj in #23236 [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in #23250 [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in #23267…
What's Changed Component updates ⬆️ [CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in #22882 [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in #23098 (cherry-pick) Fix issue related to scanner API by @stonezdj in #23109 (cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in #…
What's Changed Component updates ⬆️ [CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in #22882 [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in #23098 (cherry-pick) Fix issue related to scanner API by @stonezdj in #23109 (cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in #…
What's Changed Component updates ⬆️ (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in #23022 (cherry-pick) Add User-Agent to all request by @stonezdj in #23054 (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in #23049 [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in #23096 [CHERRY-PI…
What's Changed Component updates ⬆️ (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in #23022 (cherry-pick) Add User-Agent to all request by @stonezdj in #23054 (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in #23049 [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in #23096 [CHERRY-PI…
What's Changed Component updates ⬆️ (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in #23022 (cherry-pick) Add User-Agent to all request by @stonezdj in #23054 (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in #23049 [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in #23096 [CHERRY-PI…
What's Changed Exciting New Features 🎉 add tag deletion option for gc by @wy65701436 in #22382 Add UI for limit upstream registry connection by @stonezdj in #22406 disable land tag in the backend storage by @wy65701436 in #22507 Enhancement 🚀 Add max_upstream_conn parameter for each proxy_cache project by @stonezdj in #22348 add per-endpoint CA certificate support for registry endpoints by @wy6570…
What's Changed Exciting New Features 🎉 add tag deletion option for gc by @wy65701436 in #22382 Add UI for limit upstream registry connection by @stonezdj in #22406 disable land tag in the backend storage by @wy65701436 in #22507 Add UI option to enable proxy cache referrer API by @stonezdj in #22767 Enhancement 🚀 Add max_upstream_conn parameter for each proxy_cache project by @stonezdj in #22348 a…
What's Changed Exciting New Features 🎉 add tag deletion option for gc by @wy65701436 in #22382 Add UI for limit upstream registry connection by @stonezdj in #22406 disable land tag in the backend storage by @wy65701436 in #22507 Add UI option to enable proxy cache referrer API by @stonezdj in #22767 Enhancement 🚀 Add max_upstream_conn parameter for each proxy_cache project by @stonezdj in #22348 a…