Harbor

Name: Harbor
Author: CNCF

Developer Tools

A container registry that signs, scans and replicates the images it stores.

Latest v2.15.2 · Jul 2, 2026by CNCFWebsite goharbor/harbor

Release activity

Release activity — 10 releases across 8 days since Mar 20, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Mar 20, 2026. Older weeks are hidden at this screen width.
				Apr				May					Jun				Jul				Aug
Sunday		No releases on Mar 22, 2026	No releases on Mar 29, 2026	No releases on Apr 5, 2026	No releases on Apr 12, 2026	No releases on Apr 19, 2026	No releases on Apr 26, 2026	No releases on May 3, 2026	1 release on May 10, 2026	No releases on May 17, 2026	No releases on May 24, 2026	No releases on May 31, 2026	No releases on Jun 7, 2026	No releases on Jun 14, 2026	No releases on Jun 21, 2026	No releases on Jun 28, 2026	No releases on Jul 5, 2026	No releases on Jul 12, 2026	No releases on Jul 19, 2026	No releases on Jul 26, 2026	No releases on Aug 2, 2026	No releases on Aug 9, 2026
Monday		No releases on Mar 23, 2026	No releases on Mar 30, 2026	No releases on Apr 6, 2026	No releases on Apr 13, 2026	No releases on Apr 20, 2026	No releases on Apr 27, 2026	No releases on May 4, 2026	1 release on May 11, 2026	No releases on May 18, 2026	No releases on May 25, 2026	No releases on Jun 1, 2026	No releases on Jun 8, 2026	No releases on Jun 15, 2026	No releases on Jun 22, 2026	No releases on Jun 29, 2026	No releases on Jul 6, 2026	No releases on Jul 13, 2026	No releases on Jul 20, 2026	No releases on Jul 27, 2026	No releases on Aug 3, 2026	No releases on Aug 10, 2026
Tuesday		No releases on Mar 24, 2026	No releases on Mar 31, 2026	No releases on Apr 7, 2026	No releases on Apr 14, 2026	No releases on Apr 21, 2026	No releases on Apr 28, 2026	No releases on May 5, 2026	No releases on May 12, 2026	No releases on May 19, 2026	No releases on May 26, 2026	No releases on Jun 2, 2026	No releases on Jun 9, 2026	No releases on Jun 16, 2026	No releases on Jun 23, 2026	No releases on Jun 30, 2026	No releases on Jul 7, 2026	No releases on Jul 14, 2026	No releases on Jul 21, 2026	No releases on Jul 28, 2026	No releases on Aug 4, 2026	No releases on Aug 11, 2026
Wednesday		No releases on Mar 25, 2026	No releases on Apr 1, 2026	No releases on Apr 8, 2026	No releases on Apr 15, 2026	No releases on Apr 22, 2026	1 release on Apr 29, 2026	2 releases on May 6, 2026	No releases on May 13, 2026	No releases on May 20, 2026	No releases on May 27, 2026	No releases on Jun 3, 2026	No releases on Jun 10, 2026	1 release on Jun 17, 2026	No releases on Jun 24, 2026	No releases on Jul 1, 2026	No releases on Jul 8, 2026	No releases on Jul 15, 2026	No releases on Jul 22, 2026	No releases on Jul 29, 2026	No releases on Aug 5, 2026
Thursday		No releases on Mar 26, 2026	No releases on Apr 2, 2026	No releases on Apr 9, 2026	No releases on Apr 16, 2026	No releases on Apr 23, 2026	No releases on Apr 30, 2026	No releases on May 7, 2026	No releases on May 14, 2026	No releases on May 21, 2026	No releases on May 28, 2026	No releases on Jun 4, 2026	No releases on Jun 11, 2026	No releases on Jun 18, 2026	No releases on Jun 25, 2026	2 releases on Jul 2, 2026	No releases on Jul 9, 2026	No releases on Jul 16, 2026	No releases on Jul 23, 2026	No releases on Jul 30, 2026	No releases on Aug 6, 2026
Friday	1 release on Mar 20, 2026	No releases on Mar 27, 2026	No releases on Apr 3, 2026	No releases on Apr 10, 2026	No releases on Apr 17, 2026	No releases on Apr 24, 2026	No releases on May 1, 2026	No releases on May 8, 2026	No releases on May 15, 2026	No releases on May 22, 2026	No releases on May 29, 2026	No releases on Jun 5, 2026	No releases on Jun 12, 2026	No releases on Jun 19, 2026	No releases on Jun 26, 2026	No releases on Jul 3, 2026	No releases on Jul 10, 2026	No releases on Jul 17, 2026	No releases on Jul 24, 2026	No releases on Jul 31, 2026	No releases on Aug 7, 2026
Saturday	No releases on Mar 21, 2026	No releases on Mar 28, 2026	No releases on Apr 4, 2026	No releases on Apr 11, 2026	No releases on Apr 18, 2026	No releases on Apr 25, 2026	No releases on May 2, 2026	No releases on May 9, 2026	No releases on May 16, 2026	No releases on May 23, 2026	No releases on May 30, 2026	No releases on Jun 6, 2026	No releases on Jun 13, 2026	No releases on Jun 20, 2026	1 release on Jun 27, 2026	No releases on Jul 4, 2026	No releases on Jul 11, 2026	No releases on Jul 18, 2026	No releases on Jul 25, 2026	No releases on Aug 1, 2026	No releases on Aug 8, 2026

10 releases since Mar 20, 2026, busiest day 2

Changelog

v2.15.2

Jul 2, 2026 · about 1 month ago

Changed 12

Make openapi-generator-cli download URL configurable
Bump Go version from 1.25.9 to 1.26.3
Replace redis with valkey as cache backend
Harden crypto usage and drop unused SMTP package
Support dynamic OpenAPI generator and PyPI URLs via environment variables
Bump golang to v1.26.4
Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22
Update registry source tag to rc.5
Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml
Bump trivy to v0.72.0 and trivy adapter to v0.38.0
Use stable registry source tag v2.8.3-harbor.1
Support configurable PIP_INDEX_URL for swagger client build

Fixed 6

Ignore tlog during cosign verification
Bump repository update_time on tag and artifact changes
Fix UI issues across portal components
Use selected tag for pull command copy
Fix multiple UI/UX issues for checkboxes, alignment, dark theme, and i18n
Align pending job queue counts and improve form styling

Security 1

Validate blob-mount source project and reject tokens missing iat

What's Changed

Component updates ⬆️

[CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221
bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236
[cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250
[cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267
[CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261
[CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280
[CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286
[CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292
[CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297
(cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328
[cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356
(cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377
[Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381
bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382
(cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379
[Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395
(cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399
cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426
cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428
Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435
[cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440
[cherry-pick] fix(portal): align pending job queue counts and improve form styling by @wy65701436 in https://github.com/goharbor/harbor/pull/23459
build(registry): update registry source tag to rc.5 by @chlins in https://github.com/goharbor/harbor/pull/23465

Bump Component Version 🤖

bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362
(cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378
Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386
Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422
Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424
sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431
Bump trivy(0.72.0) and trivy adatper(0.38.0) by @stonezdj in https://github.com/goharbor/harbor/pull/23480
build(registry): use stable registry source tag v2.8.3-harbor.1 by @chlins in https://github.com/goharbor/harbor/pull/23482
update base image by @stonezdj in https://github.com/goharbor/harbor/pull/23485

Other Changes

[CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242
build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360
[Backport 2.15.0] test(UI): fix UI robot test cases for Angular and Clarity Upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23380
[Cherry-Pick] test(ui): add retry for Get Harbor CA to improve stability (#23396) by @fiona-xie in https://github.com/goharbor/harbor/pull/23405
Downgrade node-release to 2.0.48 for build compatibility by @stonezdj in https://github.com/goharbor/harbor/pull/23432

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.1...v2.15.2

View originalPermalink

v2.15.2-rc3

Pre-releaseJul 2, 2026 · about 1 month ago

Changed 11

Make openapi-generator-cli download URL configurable
Bump Go version from 1.25.9 to 1.26.3
Rebuild goharbor/photon image before creating new harbor base images
Replace redis with valkey as cache backend
Disable tlog for cosign signing checks
Upgrade Harbor go.mod OSS packages
Harden crypto usage and drop unused SMTP package
Update Makefile PIP_INDEX_URL to use default value if not defined
Support dynamic OpenAPI generator and PyPI URLs via env vars
Bump golang to v1.26.4
Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22

Fixed 7

Ignore tlog during cosign verification
Bump repository update_time on tag and artifact changes
Fix db_schedule and replication failed cases after Angular and Clarity upgrade
Fix UI issues across portal components
Use selected tag for pull command copy
Fix multiple UI/UX issues for checkboxes, alignment, dark theme, and i18n
Align pending job queue counts and improve form styling

Removed 1

Remove install net-tools from db dockerfile as photon removed it

Security 1

Validate blob-mount source project and reject tokens missing iat

What's Changed

Component updates ⬆️

[CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221
bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236
[cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250
[cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267
[CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261
[CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280
[CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286
[CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292
[CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297
(cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328
[cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356
(cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377
[Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381
bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382
(cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379
[Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395
(cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399
cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426
cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428
Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435
[cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440
[cherry-pick] fix(portal): align pending job queue counts and improve form styling by @wy65701436 in https://github.com/goharbor/harbor/pull/23459
build(registry): update registry source tag to rc.5 by @chlins in https://github.com/goharbor/harbor/pull/23465

Bump Component Version 🤖

bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362
(cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378
Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386
Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422
Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424
sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431
Bump trivy(0.72.0) and trivy adatper(0.38.0) by @stonezdj in https://github.com/goharbor/harbor/pull/23480
build(registry): use stable registry source tag v2.8.3-harbor.1 by @chlins in https://github.com/goharbor/harbor/pull/23482
update base image by @stonezdj in https://github.com/goharbor/harbor/pull/23485

Other Changes

[CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242
build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360
[Backport 2.15.0] test(UI): fix UI robot test cases for Angular and Clarity Upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23380
[Cherry-Pick] test(ui): add retry for Get Harbor CA to improve stability (#23396) by @fiona-xie in https://github.com/goharbor/harbor/pull/23405
Downgrade node-release to 2.0.48 for build compatibility by @stonezdj in https://github.com/goharbor/harbor/pull/23432

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.1...v2.15.2-rc3

View originalPermalink

v2.15.2-rc2

Pre-releaseJun 27, 2026 · about 1 month ago

Changed 12

Make openapi-generator-cli download URL configurable
Bump Go version from 1.25.9 to 1.26.3
Rebuild goharbor/photon image before creating new harbor base images
Replace redis with valkey as cache backend
Disable tlog for cosign signing checks
Upgrade harbor go.mod OSS packages
Harden crypto usage and drop unused SMTP package
Update Makefile PIP_INDEX_URL to use default value if not defined
Support dynamic OpenAPI generator and PyPI URLs via env vars
Bump golang to v1.26.4
Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22
Bump Trivy to v0.71.1 and Trivy adapter to v0.37.1

Fixed 6

Ignore tlog during cosign verification
Bump repository update_time on tag and artifact changes
Fix db_schedule and replication failed cases after Angular and Clarity upgrade
Fix UI issues across portal components
Use selected tag for pull command copy
Fix multiple UI and UX issues for checkboxes, alignment, dark theme, and i18n

Removed 1

Remove install net-tools from db dockerfile as photon removed it

Security 1

Validate blob-mount source project and reject tokens missing iat

What's Changed

Component updates ⬆️

[CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221
bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236
[cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250
[cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267
[CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261
[CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280
[CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286
[CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292
[CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297
(cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328
[cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356
(cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377
[Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381
bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382
(cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379
[Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395
(cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399
cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426
cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428
Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435
[cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440

Bump Component Version 🤖

bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362
(cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378
Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386
Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422
Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424
sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431

Other Changes

[CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242
build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360
[Backport 2.15.0] test(UI): fix UI robot test cases for Angular and Clarity Upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23380
[Cherry-Pick] test(ui): add retry for Get Harbor CA to improve stability (#23396) by @fiona-xie in https://github.com/goharbor/harbor/pull/23405
Downgrade node-release to 2.0.48 for build compatibility by @stonezdj in https://github.com/goharbor/harbor/pull/23432

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.1...v2.15.2-rc2

View originalPermalink

v2.15.2-rc1

Pre-releaseJun 17, 2026 · about 2 months ago

Changed 14

Make openapi-generator-cli download URL configurable
Bump Go version from 1.25.9 to 1.26.3
Rebuild goharbor/photon image before creating new harbor base images
Replace redis with valkey as cache backend
Disable tlog for cosign signing checks
Upgrade Harbor go.mod OSS packages
Update Makefile PIP_INDEX_URL to use default value if not defined
Support dynamic OpenAPI generator and PyPI URLs via environment variables
Bump golang to v1.26.4
Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22
Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml
Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1
Support configurable PIP_INDEX_URL for swagger client build
Use dev-legacy tags to decouple 2.15 builds from main

Fixed 2

Ignore tlog during cosign verification
Bump repository update_time on tag and artifact changes

Removed 1

Remove install net-tools from db dockerfile as photon removed it

Security 2

Validate blob-mount source project and reject tokens missing iat
Harden crypto usage and drop unused SMTP package

What's Changed

Component updates ⬆️

[CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221
bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236
[cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250
[cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267
[CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261
[CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280
[CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286
[CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292
[CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297
(cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328
[cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356
(cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377
[Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381
bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382
(cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379

Bump Component Version 🤖

bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362
(cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378
Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386

Other Changes

[CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242
build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360
[Backport 2.15.0] test(UI): fix UI robot test cases for Angular and Clarity Upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23380

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.1...v2.15.2-rc1

View originalPermalink

v2.14.4

May 11, 2026 · 3 months ago

Added 1

Prevent background polling from renewing session TTL

Changed 2

Bump Go to 1.25.9 and use goharbor/photon:5.0 base images
Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package

Fixed 4

Fix SessionRegenerate save args and lifetime
Fix issue related to scanner API
Call /v2/auth/token api to get bearer token for dockerhub adapter
Fix the issue distribution instance edit without credentials

What's Changed

Component updates ⬆️

[CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in https://github.com/goharbor/harbor/pull/22882
[CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23098
(cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23109
(cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23208
bump Go to 1.25.9 and use goharbor/photon:5.0 base images by @stonezdj in https://github.com/goharbor/harbor/pull/23204
Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package by @stonezdj in https://github.com/goharbor/harbor/pull/23215
(cherry-pick) Fix the issue distribution instance edit without creden… by @chlins in https://github.com/goharbor/harbor/pull/23220

Full Changelog: https://github.com/goharbor/harbor/compare/v2.14.3...v2.14.4

View originalPermalink

v2.14.4-rc1

Pre-releaseMay 10, 2026 · 3 months ago

Changed 3

Prevent background polling from renewing session TTL
Bump Go to 1.25.9 and use goharbor/photon:5.0 base images
Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package

Fixed 4

Fix SessionRegenerate save args and lifetime
Fix issue related to scanner API
Call /v2/auth/token api to get bearer token for dockerhub adapter
Fix the issue distribution instance edit without credentials

What's Changed

Component updates ⬆️

[CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in https://github.com/goharbor/harbor/pull/22882
[CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23098
(cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23109
(cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23208
bump Go to 1.25.9 and use goharbor/photon:5.0 base images by @stonezdj in https://github.com/goharbor/harbor/pull/23204
Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package by @stonezdj in https://github.com/goharbor/harbor/pull/23215
(cherry-pick) Fix the issue distribution instance edit without creden… by @chlins in https://github.com/goharbor/harbor/pull/23220

Full Changelog: https://github.com/goharbor/harbor/compare/v2.14.3...v2.14.4-rc1

View originalPermalink

v2.15.1

May 6, 2026 · 3 months ago

Added 1

Add User-Agent to all requests

Changed 5

Call /v2/auth/token api to get bearer token for dockerhub adapter
Prevent background polling from renewing session TTL
Change base image to goharbor/photon:5.0
Bump Go to 1.25.9 and refresh base images
Upgrade Go dependencies go-jose and otel sdk

Fixed 5

Fix Last Pull time on parent/child artifacts and on creation
Fix proxy cache serve local on remote not found
Fix issue related to scanner API
Redact redis_url_reg from GC extra attrs
Fix the issue distribution instance edit without credential can not save

Security 1

Update photon packages to fix CVEs

What's Changed

Component updates ⬆️

(cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022
(cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054
(cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049
[cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096
[CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097
(cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108
bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120
[CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141
(cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166
Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176
Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180

Bump Component Version 🤖

bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150
Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1

View originalPermalink

v2.15.1-rc2

Pre-releaseMay 6, 2026 · 3 months ago

Added 1

Add User-Agent to all requests

Changed 5

Call /v2/auth/token api to get bearer token for dockerhub adapter
Prevent background polling from renewing session TTL
Change base image to goharbor/photon:5.0
Bump Go to 1.25.9
Upgrade go deps go-jose and otel sdk

Fixed 5

Fix Last Pull time on parent/child artifacts and on creation
Fix proxy cache serve local on remote not found
Fix issue related to scanner API
Redact redis_url_reg from GC extra attrs
Fix the issue distribution instance edit without credential can not save

Security 1

Update photon packages to fix CVEs

What's Changed

Component updates ⬆️

(cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022
(cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054
(cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049
[cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096
[CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097
(cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108
bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120
[CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141
(cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166
Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176
Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180

Bump Component Version 🤖

bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150
Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1-rc2

View originalPermalink

v2.15.1-rc1

Pre-releaseApr 29, 2026 · 3 months ago

Added 1

Add User-Agent to all requests

Changed 5

Call /v2/auth/token api to get bearer token for dockerhub adapter
Prevent background polling from renewing session TTL
Change base image to goharbor/photon:5.0
Bump Go to 1.25.9 and refresh base images
Upgrade Go dependencies go-jose and otel sdk

Fixed 5

Fix Last Pull time on parent/child artifacts and on creation
Fix proxy cache serve local on remote not found
Fix issue related to scanner API
Redact redis_url_reg from GC extra attrs
Fix the issue distribution instance edit without credential can not save

Security 1

Update photon packages to fix CVEs

What's Changed

Component updates ⬆️

(cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022
(cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054
(cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049
[cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096
[CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097
(cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108
bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120
[CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141
(cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166
Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176
Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180

Bump Component Version 🤖

bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150
Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1-rc1

View originalPermalink

v2.15.0

Mar 20, 2026 · 5 months ago

Added 7

Add tag deletion option for garbage collection
Add UI for limiting upstream registry connections
Add max_upstream_conn parameter for each proxy_cache project
Add per-endpoint CA certificate support for registry endpoints
Add OCI type support for JFrog registry
Add DeleteTag support for both AWS and Azure container registry adapters
Support Cosign v3 Bundle signature format

Changed 4

Disable land tag in the backend storage
Allow disabling audit log to database during initialization
Update and improve Traditional Chinese locale
OIDC integration now handles cases where a user has only a single group

Fixed 7

Fix robot API call to users endpoint
Correct parameter in registry upload status query
Support both docker-compose v1 and docker compose v2
Fix typo in Korean placeholder and update strings
Remove unwanted scrollbar from tag retention UI
Correct typo in artifact_type column definition
Fix errors related to search user and search groups

Removed 2

Remove unused SYNC_QUOTA from environment template
Remove legacy switch from decodeFilters

What's Changed

Exciting New Features 🎉

add tag deletion option for gc by @wy65701436 in https://github.com/goharbor/harbor/pull/22382
Add UI for limit upstream registry connection by @stonezdj in https://github.com/goharbor/harbor/pull/22406
disable land tag in the backend storage by @wy65701436 in https://github.com/goharbor/harbor/pull/22507

Enhancement 🚀

Add max_upstream_conn parameter for each proxy_cache project by @stonezdj in https://github.com/goharbor/harbor/pull/22348
add per-endpoint CA certificate support for registry endpoints by @wy65701436 in https://github.com/goharbor/harbor/pull/22535
Add oci type support for jfrog registry by @stonezdj in https://github.com/goharbor/harbor/pull/22589
add DeleteTag support for both aws and azure cr adapters by @shaiatias in https://github.com/goharbor/harbor/pull/22227

Component updates ⬆️

Remove unused SYNC_QUOTA from env.jinja template by @mxab in https://github.com/goharbor/harbor/pull/22280
bump base to v2.15.0 by @wy65701436 in https://github.com/goharbor/harbor/pull/22316
chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22304
chore(deps): bump github.com/aws/aws-sdk-go from 1.55.6 to 1.55.8 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22306
chore(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22305
chore(deps): bump golang.org/x/text from 0.27.0 to 0.29.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22338
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.29 to 1.1.31 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22337
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.32 to 1.1.34 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22356
chore(deps): bump golang.org/x/time from 0.12.0 to 0.13.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22360
chore(deps): bump k8s.io/client-go from 0.33.3 to 0.34.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22359
chore(deps): bump github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.19.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22358
chore(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.15.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22357
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.59.0 to 0.63.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22379
fix robot issue-21406 by @wy65701436 in https://github.com/goharbor/harbor/pull/22387
Update and improve zh-TW Traditional Chinese locale by @PeterDaveHello in https://github.com/goharbor/harbor/pull/22423
Allow disable audit log to DB when initialize by @wy65701436 in https://github.com/goharbor/harbor/pull/22452
Update zh-TW Traditional Chinese locale by @PeterDaveHello in https://github.com/goharbor/harbor/pull/22468
add migraiton sql for skip_audit_log_database by @wy65701436 in https://github.com/goharbor/harbor/pull/22487
refactor: use strings.Builder to improve performance by @rocksload in https://github.com/goharbor/harbor/pull/22453
refactor: replace Split in loops with more efficient SplitSeq by @rustversion in https://github.com/goharbor/harbor/pull/22494
refactor the logic to init skip_audit_log_database by @wy65701436 in https://github.com/goharbor/harbor/pull/22493
chore(deps): bump golang.org/x/net from 0.41.0 to 0.46.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22457
Remove legacy switch from decodeFilters after UI bug #12579 fix by @intojhanurag in https://github.com/goharbor/harbor/pull/22510
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.34 to 1.1.44 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22519
fix robot call the users api by @wy65701436 in https://github.com/goharbor/harbor/pull/22492
Update Release note template and dependabot labels by @OrlinVasilev in https://github.com/goharbor/harbor/pull/22528
refactor: replace HasPrefix+TrimPrefix with CutPrefix by @dulanting in https://github.com/goharbor/harbor/pull/22520
fix(registry): correct parameter in upload status query by @chlins in https://github.com/goharbor/harbor/pull/22574
fix: support both docker-compose v1 and docker compose v2 by @Coldchen99 in https://github.com/goharbor/harbor/pull/22581
ci(workflows): simplify label pattern in label_check by @chlins in https://github.com/goharbor/harbor/pull/22596
chore: Remove Unused Lang Translations - Recreate PR (#21893) by @bupd in https://github.com/goharbor/harbor/pull/22587
fix(portal): fix typo in ko-kr placeholder and update strings by @g-yunjh in https://github.com/goharbor/harbor/pull/22617
fix(ui): Remove unwanted scrollbar from tag-retention by @bupd in https://github.com/goharbor/harbor/pull/22598
feat(cosign): Support Cosign v3 Bundle signature format by @Aloui-Ikram in https://github.com/goharbor/harbor/pull/22628
feat: bump UI version v2.15.0 by @bupd in https://github.com/goharbor/harbor/pull/22645
fix(artifact): correct typo in artifact_type column definition by @chlins in https://github.com/goharbor/harbor/pull/22656
fix error related to search user and search groups by @stonezdj in https://github.com/goharbor/harbor/pull/22606
refine apitest to adopt proxy environment by @MinerYang in https://github.com/goharbor/harbor/pull/22706
Allows OIDC integration to handle the case where a user only has a single group by @lfrancke in https://github.com/goharbor/harbor/pull/22723
refactor: use strings.Cut to simplify code by @liuyueyangxmu in https://github.com/goharbor/harbor/pull/22590
fix(session): fix invalid data type in SessionRegenerate by @liubin in https://github.com/goharbor/harbor/pull/22726
update swagger file for creating tag by @wy65701436 in https://github.com/goharbor/harbor/pull/22754
Fix goroutine leak in StopAndWait by buffering errChan by @remo-lab in https://github.com/goharbor/harbor/pull/22740
docs/makefile-commands by @intojhanurag in https://github.com/goharbor/harbor/pull/22605
Add pprof support by @strigazi in https://github.com/goharbor/harbor/pull/22005
fix(exporter): Export Harbor version via Prometheus exporter binary. by @Vad1mo in https://github.com/goharbor/harbor/pull/22733
chore(deps): update github.com/Masterminds/semver to v3 by @Juneezee in https://github.com/goharbor/harbor/pull/22411
Fix(portal): Restore Missing i18n Translation Keys by @bupd in https://github.com/goharbor/harbor/pull/22722
Fix: Hide alert messages irrelevant to users in UI by @bupd in https://github.com/goharbor/harbor/pull/21972
feat: Add Style Linters (usestdlibvars, dupl) by @bupd in https://github.com/goharbor/harbor/pull/22670
Fix redis sentinel master acl for jobservice by @MinerYang in https://github.com/goharbor/harbor/pull/22765
support parse redis acl for registry config by @MinerYang in https://github.com/goharbor/harbor/pull/22770
fix(ui): avoid duplicate RUN in build history by @Tusharjamdade in https://github.com/goharbor/harbor/pull/22685
fix flaky ut tests involving workers by @Vad1mo in https://github.com/goharbor/harbor/pull/22768
Pin distribution src tag to v2.8.3-harbor.1-rc.1 by @MinerYang in https://github.com/goharbor/harbor/pull/22772
fix(core): add warning when config admin password is ignored by @thc1006 in https://github.com/goharbor/harbor/pull/22709
Fix: Copy Pull Button when tags are undefined by @bupd in https://github.com/goharbor/harbor/pull/22136
Replace pull-through cache with proxy cache by @stonezdj in https://github.com/goharbor/harbor/pull/22766
add support for configure trivy db repository via harbor.yml by @quent1-fr in https://github.com/goharbor/harbor/pull/21193
build: remove unused REGISTRYURL and GCS download path for registry build by @SoumyaRaikwar in https://github.com/goharbor/harbor/pull/22372
add prepare migration script for 2.15.0 by @MinerYang in https://github.com/goharbor/harbor/pull/22788
fix: correct multiline string in yaml by @Vad1mo in https://github.com/goharbor/harbor/pull/22809
fix: mock http server for volcenginecr adapt ut by @hyy0322 in https://github.com/goharbor/harbor/pull/22810
chore(deps): bump form-data in /src/portal by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22523
fix 22817 by @wy65701436 in https://github.com/goharbor/harbor/pull/22826
Swagger Replication Rule invalid JSON by @mlimardo1984 in https://github.com/goharbor/harbor/pull/22724
fix the git action publish permission issue by @wy65701436 in https://github.com/goharbor/harbor/pull/22841
[cherry-pick] fix: Update Verify Remote Cert tooltip for registry endpoints by @wy65701436 in https://github.com/goharbor/harbor/pull/22867
[CHERRY_PICK] fix(session): use correct maxlifetime in SessionRegenerate by @chlins in https://github.com/goharbor/harbor/pull/22881
refresh base images for v2.15.0 rc2 by @wy65701436 in https://github.com/goharbor/harbor/pull/22883
fix: bump Trivy to v0.69.2 following supply chain incident (#22896) by @wy65701436 in https://github.com/goharbor/harbor/pull/22911
refresh base images for v2.15 rc2 by @wy65701436 in https://github.com/goharbor/harbor/pull/22910
(cherry-pick) Remove payload from config audit log by @stonezdj in https://github.com/goharbor/harbor/pull/22917
bump otel to 1.40.0 by @wy65701436 in https://github.com/goharbor/harbor/pull/22921
Bump trivy to 0.69.3 & adapter to v0.35.1-rc.1 on release-2.15.0 by @MinerYang in https://github.com/goharbor/harbor/pull/22929
fix(security): reject bearer tokens issued before project creation (#… by @wy65701436 in https://github.com/goharbor/harbor/pull/22938
[cherry-pick] add the 2.14.1 sql by @wy65701436 in https://github.com/goharbor/harbor/pull/22948
Bump trivy-adapter v0.35.1 GA on release-2.15.0 by @MinerYang in https://github.com/goharbor/harbor/pull/22967
bump docker cli to latest version by @wy65701436 in https://github.com/goharbor/harbor/pull/22981
[cherry-pick]fix db scheme migration issue by @wy65701436 in https://github.com/goharbor/harbor/pull/22999

Docs update 🗄️

Fix typos for i18n by @ciphersaw in https://github.com/goharbor/harbor/pull/22301
Update badges by @Vad1mo in https://github.com/goharbor/harbor/pull/22139
fix: typos in comments by @NAM-MAN in https://github.com/goharbor/harbor/pull/22738
chore: add OpenSSF Security Scorecard badge by @kashish00208 in https://github.com/goharbor/harbor/pull/22774
Fix broken cosign documentation link in signature-verification.md by @Aloui-Ikram in https://github.com/goharbor/harbor/pull/22798

Community update 🧑🏻‍🤝‍🧑🏾

Contrib backup/restore scripts by @teletechie in https://github.com/goharbor/harbor/pull/21971

Bump Component Version 🤖

chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.2 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22600
chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22579
chore(deps): bump k8s.io/apimachinery from 0.34.1 to 0.34.2 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22623
chore(deps): bump lodash from 4.17.21 to 4.17.23 in /src/portal by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22763
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /src/portal/app-swagger-ui by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22594
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.3 in /src/portal by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22698
Bump go-redis dependencies for supply chain security by @RainbowMango in https://github.com/goharbor/harbor/pull/22769
bump go to v1.25 by @wy65701436 in https://github.com/goharbor/harbor/pull/22794
bump base images for v2.15 by @wy65701436 in https://github.com/goharbor/harbor/pull/22807
chore(deps): bump form-data from 4.0.2 to 4.0.4 in /src/portal/app-swagger-ui by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22522
bump go and base images by @wy65701436 in https://github.com/goharbor/harbor/pull/22831
build base for v2.15.0-rc1 by @wy65701436 in https://github.com/goharbor/harbor/pull/22839
Update go.mod upgrade grpc to v1.79.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23010

Other Changes

Remove port 9443 from harbor IP for webhook event check by @stonezdj in https://github.com/goharbor/harbor/pull/22320
Remove GCR replication because GCR account is removed by @stonezdj in https://github.com/goharbor/harbor/pull/22309
chore(deps): bump aws-actions/configure-aws-credentials from 4.2.1 to 5.0.0 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22324
chore(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22325
chore(deps): bump actions/stale from 9.1.0 to 10.0.0 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22323
chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22509
docs: minor improvement for docs by @geogrego in https://github.com/goharbor/harbor/pull/22526
Add HARBOR_ADMIN to run upgrade script by @stonezdj in https://github.com/goharbor/harbor/pull/22615
Correct the log upload path and make sure it always run by @stonezdj in https://github.com/goharbor/harbor/pull/22616
chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22584
chore(deps): bump aws-actions/configure-aws-credentials from 5.0.0 to 5.1.1 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22599
chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22642
Add Cosign keyless signing for Harbor release artifacts by @Aloui-Ikram in https://github.com/goharbor/harbor/pull/22578
chore(deps): bump sigstore/cosign-installer from 3.7.0 to 4.0.0 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22732
ci: migrate build workflows to ubuntu-latest runners by @chlins in https://github.com/goharbor/harbor/pull/22750
ci: fix the publishImage script with new docker version by @chlins in https://github.com/goharbor/harbor/pull/22753
chore(deps): bump kentaro-m/auto-assign-action from 2.0.0 to 2.0.1 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22748
chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22432