# Harbor changelog > A container registry that signs, scans and replicates the images it stores. - Vendor: CNCF - Category: Developer Tools - Official site: https://goharbor.io - Tracked by: What's New (https://whatsnew.fyi/product/harbor) - Harvested from: GitHub (goharbor/harbor) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### v2.15.2 - Date: 2026-07-02 - Version: v2.15.2 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.2 - **changed** — Make openapi-generator-cli download URL configurable - **changed** — Bump Go version from 1.25.9 to 1.26.3 - **changed** — Replace redis with valkey as cache backend - **fixed** — Ignore tlog during cosign verification - **fixed** — Bump repository update_time on tag and artifact changes - **security** — Validate blob-mount source project and reject tokens missing iat - **changed** — Harden crypto usage and drop unused SMTP package - **changed** — Support dynamic OpenAPI generator and PyPI URLs via environment variables - **changed** — Bump golang to v1.26.4 - **changed** — Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 - **fixed** — Fix UI issues across portal components - **fixed** — Use selected tag for pull command copy - **fixed** — Fix multiple UI/UX issues for checkboxes, alignment, dark theme, and i18n - **fixed** — Align pending job queue counts and improve form styling - **changed** — Update registry source tag to rc.5 - **changed** — Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml - **changed** — Bump trivy to v0.72.0 and trivy adapter to v0.38.0 - **changed** — Use stable registry source tag v2.8.3-harbor.1 - **changed** — Support configurable PIP_INDEX_URL for swagger client build ##### What's Changed ###### Component updates ⬆️ * [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221 * bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236 * [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250 * [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267 * [CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261 * [CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280 * [CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286 * [CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292 * [CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297 * (cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328 * [cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356 * (cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377 * [Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381 * bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382 * (cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379 * [Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395 * (cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399 * cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426 * cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428 * Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435 * [cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440 * [cherry-pick] fix(portal): align pending job queue counts and improve form styling by @wy65701436 in https://github.com/goharbor/harbor/pull/23459 * build(registry): update registry source tag to rc.5 by @chlins in https://github.com/goharbor/harbor/pull/23465 ###### Bump Component Version 🤖 * bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362 * (cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378 * Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386 * Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422 * Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424 * sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431 * Bump trivy(0.72.0) and trivy adatper(0.38.0) by @stonezdj in https:/ _[Truncated at 4000 characters — full notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2]_ ### v2.15.2-rc3 - Date: 2026-07-02 - Version: v2.15.2-rc3 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2-rc3 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.2-rc3 - Labels: Pre-release - **changed** — Make openapi-generator-cli download URL configurable - **changed** — Bump Go version from 1.25.9 to 1.26.3 - **changed** — Rebuild goharbor/photon image before creating new harbor base images - **removed** — Remove install net-tools from db dockerfile as photon removed it - **changed** — Replace redis with valkey as cache backend - **changed** — Disable tlog for cosign signing checks - **fixed** — Ignore tlog during cosign verification - **fixed** — Bump repository update_time on tag and artifact changes - **security** — Validate blob-mount source project and reject tokens missing iat - **changed** — Upgrade Harbor go.mod OSS packages - **changed** — Harden crypto usage and drop unused SMTP package - **changed** — Update Makefile PIP_INDEX_URL to use default value if not defined - **changed** — Support dynamic OpenAPI generator and PyPI URLs via env vars - **changed** — Bump golang to v1.26.4 - **changed** — Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 - **fixed** — Fix db_schedule and replication failed cases after Angular and Clarity upgrade - **fixed** — Fix UI issues across portal components - **fixed** — Use selected tag for pull command copy - **fixed** — Fix multiple UI/UX issues for checkboxes, alignment, dark theme, and i18n - **fixed** — Align pending job queue counts and improve form styling ##### What's Changed ###### Component updates ⬆️ * [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221 * bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236 * [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250 * [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267 * [CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261 * [CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280 * [CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286 * [CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292 * [CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297 * (cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328 * [cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356 * (cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377 * [Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381 * bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382 * (cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379 * [Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395 * (cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399 * cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426 * cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428 * Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435 * [cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440 * [cherry-pick] fix(portal): align pending job queue counts and improve form styling by @wy65701436 in https://github.com/goharbor/harbor/pull/23459 * build(registry): update registry source tag to rc.5 by @chlins in https://github.com/goharbor/harbor/pull/23465 ###### Bump Component Version 🤖 * bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362 * (cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378 * Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386 * Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422 * Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424 * sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431 * Bump trivy(0.72.0) and trivy adatper(0.38.0) by @stonezdj in htt _[Truncated at 4000 characters — full notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2-rc3]_ ### v2.15.2-rc2 - Date: 2026-06-27 - Version: v2.15.2-rc2 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2-rc2 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.2-rc2 - Labels: Pre-release - **changed** — Make openapi-generator-cli download URL configurable - **changed** — Bump Go version from 1.25.9 to 1.26.3 - **changed** — Rebuild goharbor/photon image before creating new harbor base images - **removed** — Remove install net-tools from db dockerfile as photon removed it - **changed** — Replace redis with valkey as cache backend - **changed** — Disable tlog for cosign signing checks - **fixed** — Ignore tlog during cosign verification - **fixed** — Bump repository update_time on tag and artifact changes - **security** — Validate blob-mount source project and reject tokens missing iat - **changed** — Upgrade harbor go.mod OSS packages - **changed** — Harden crypto usage and drop unused SMTP package - **changed** — Update Makefile PIP_INDEX_URL to use default value if not defined - **changed** — Support dynamic OpenAPI generator and PyPI URLs via env vars - **changed** — Bump golang to v1.26.4 - **changed** — Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 - **fixed** — Fix db_schedule and replication failed cases after Angular and Clarity upgrade - **fixed** — Fix UI issues across portal components - **fixed** — Use selected tag for pull command copy - **fixed** — Fix multiple UI and UX issues for checkboxes, alignment, dark theme, and i18n - **changed** — Bump Trivy to v0.71.1 and Trivy adapter to v0.37.1 ##### What's Changed ###### Component updates ⬆️ * [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221 * bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236 * [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250 * [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267 * [CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261 * [CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280 * [CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286 * [CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292 * [CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297 * (cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328 * [cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356 * (cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377 * [Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381 * bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382 * (cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379 * [Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395 * (cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399 * cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426 * cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428 * Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435 * [cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440 ###### Bump Component Version 🤖 * bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362 * (cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378 * Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386 * Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422 * Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424 * sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431 ###### Other Changes * [CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242 * build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360 * [Backport 2.15.0] test(UI): fix _[Truncated at 4000 characters — full notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2-rc2]_ ### v2.15.2-rc1 - Date: 2026-06-17 - Version: v2.15.2-rc1 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2-rc1 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.2-rc1 - Labels: Pre-release - **changed** — Make openapi-generator-cli download URL configurable - **changed** — Bump Go version from 1.25.9 to 1.26.3 - **changed** — Rebuild goharbor/photon image before creating new harbor base images - **removed** — Remove install net-tools from db dockerfile as photon removed it - **changed** — Replace redis with valkey as cache backend - **changed** — Disable tlog for cosign signing checks - **fixed** — Ignore tlog during cosign verification - **fixed** — Bump repository update_time on tag and artifact changes - **security** — Validate blob-mount source project and reject tokens missing iat - **changed** — Upgrade Harbor go.mod OSS packages - **security** — Harden crypto usage and drop unused SMTP package - **changed** — Update Makefile PIP_INDEX_URL to use default value if not defined - **changed** — Support dynamic OpenAPI generator and PyPI URLs via environment variables - **changed** — Bump golang to v1.26.4 - **changed** — Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 - **changed** — Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml - **changed** — Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 - **changed** — Support configurable PIP_INDEX_URL for swagger client build - **changed** — Use dev-legacy tags to decouple 2.15 builds from main ##### What's Changed ###### Component updates ⬆️ * [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221 * bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236 * [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250 * [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267 * [CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261 * [CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280 * [CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286 * [CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292 * [CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297 * (cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328 * [cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356 * (cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377 * [Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381 * bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382 * (cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379 ###### Bump Component Version 🤖 * bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362 * (cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378 * Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386 ###### Other Changes * [CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242 * build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360 * [Backport 2.15.0] test(UI): fix UI robot test cases for Angular and Clarity Upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23380 **Full Changelog**: https://github.com/goharbor/harbor/compare/v2.15.1...v2.15.2-rc1 ### v2.14.4 - Date: 2026-05-11 - Version: v2.14.4 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.14.4 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.14.4 - **fixed** — Fix SessionRegenerate save args and lifetime - **added** — Prevent background polling from renewing session TTL - **fixed** — Fix issue related to scanner API - **fixed** — Call /v2/auth/token api to get bearer token for dockerhub adapter - **changed** — Bump Go to 1.25.9 and use goharbor/photon:5.0 base images - **changed** — Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package - **fixed** — Fix the issue distribution instance edit without credentials ##### What's Changed ###### Component updates ⬆️ * [CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in https://github.com/goharbor/harbor/pull/22882 * [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23098 * (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23109 * (cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23208 * bump Go to 1.25.9 and use goharbor/photon:5.0 base images by @stonezdj in https://github.com/goharbor/harbor/pull/23204 * Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package by @stonezdj in https://github.com/goharbor/harbor/pull/23215 * (cherry-pick) Fix the issue distribution instance edit without creden… by @chlins in https://github.com/goharbor/harbor/pull/23220 **Full Changelog**: https://github.com/goharbor/harbor/compare/v2.14.3...v2.14.4 ### v2.14.4-rc1 - Date: 2026-05-10 - Version: v2.14.4-rc1 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.14.4-rc1 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.14.4-rc1 - Labels: Pre-release - **fixed** — Fix SessionRegenerate save args and lifetime - **changed** — Prevent background polling from renewing session TTL - **fixed** — Fix issue related to scanner API - **fixed** — Call /v2/auth/token api to get bearer token for dockerhub adapter - **changed** — Bump Go to 1.25.9 and use goharbor/photon:5.0 base images - **changed** — Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package - **fixed** — Fix the issue distribution instance edit without credentials ##### What's Changed ###### Component updates ⬆️ * [CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in https://github.com/goharbor/harbor/pull/22882 * [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23098 * (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23109 * (cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23208 * bump Go to 1.25.9 and use goharbor/photon:5.0 base images by @stonezdj in https://github.com/goharbor/harbor/pull/23204 * Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package by @stonezdj in https://github.com/goharbor/harbor/pull/23215 * (cherry-pick) Fix the issue distribution instance edit without creden… by @chlins in https://github.com/goharbor/harbor/pull/23220 **Full Changelog**: https://github.com/goharbor/harbor/compare/v2.14.3...v2.14.4-rc1 ### v2.15.1 - Date: 2026-05-06 - Version: v2.15.1 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.1 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.1 - **fixed** — Fix Last Pull time on parent/child artifacts and on creation - **added** — Add User-Agent to all requests - **fixed** — Fix proxy cache serve local on remote not found - **changed** — Call /v2/auth/token api to get bearer token for dockerhub adapter - **changed** — Prevent background polling from renewing session TTL - **fixed** — Fix issue related to scanner API - **fixed** — Redact redis_url_reg from GC extra attrs - **fixed** — Fix the issue distribution instance edit without credential can not save - **security** — Update photon packages to fix CVEs - **changed** — Change base image to goharbor/photon:5.0 - **changed** — Bump Go to 1.25.9 and refresh base images - **changed** — Upgrade Go dependencies go-jose and otel sdk ##### What's Changed ###### Component updates ⬆️ * (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022 * (cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054 * (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049 * [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096 * [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097 * (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108 * bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120 * [CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141 * (cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166 * Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176 * Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180 ###### Bump Component Version 🤖 * bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150 * Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158 **Full Changelog**: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1 ### v2.15.1-rc2 - Date: 2026-05-06 - Version: v2.15.1-rc2 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.1-rc2 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.1-rc2 - Labels: Pre-release - **fixed** — Fix Last Pull time on parent/child artifacts and on creation - **added** — Add User-Agent to all requests - **fixed** — Fix proxy cache serve local on remote not found - **changed** — Call /v2/auth/token api to get bearer token for dockerhub adapter - **changed** — Prevent background polling from renewing session TTL - **fixed** — Fix issue related to scanner API - **fixed** — Redact redis_url_reg from GC extra attrs - **fixed** — Fix the issue distribution instance edit without credential can not save - **security** — Update photon packages to fix CVEs - **changed** — Change base image to goharbor/photon:5.0 - **changed** — Bump Go to 1.25.9 - **changed** — Upgrade go deps go-jose and otel sdk ##### What's Changed ###### Component updates ⬆️ * (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022 * (cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054 * (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049 * [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096 * [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097 * (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108 * bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120 * [CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141 * (cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166 * Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176 * Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180 ###### Bump Component Version 🤖 * bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150 * Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158 **Full Changelog**: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1-rc2 ### v2.15.1-rc1 - Date: 2026-04-29 - Version: v2.15.1-rc1 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.1-rc1 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.1-rc1 - Labels: Pre-release - **fixed** — Fix Last Pull time on parent/child artifacts and on creation - **added** — Add User-Agent to all requests - **fixed** — Fix proxy cache serve local on remote not found - **changed** — Call /v2/auth/token api to get bearer token for dockerhub adapter - **changed** — Prevent background polling from renewing session TTL - **fixed** — Fix issue related to scanner API - **fixed** — Redact redis_url_reg from GC extra attrs - **fixed** — Fix the issue distribution instance edit without credential can not save - **security** — Update photon packages to fix CVEs - **changed** — Change base image to goharbor/photon:5.0 - **changed** — Bump Go to 1.25.9 and refresh base images - **changed** — Upgrade Go dependencies go-jose and otel sdk ##### What's Changed ###### Component updates ⬆️ * (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022 * (cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054 * (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049 * [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096 * [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097 * (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108 * bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120 * [CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141 * (cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166 * Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176 * Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180 ###### Bump Component Version 🤖 * bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150 * Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158 **Full Changelog**: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1-rc1 ### v2.15.0 - Date: 2026-03-20 - Version: v2.15.0 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.0 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.0 - **added** — Add tag deletion option for garbage collection - **added** — Add UI for limiting upstream registry connections - **added** — Add max_upstream_conn parameter for each proxy_cache project - **added** — Add per-endpoint CA certificate support for registry endpoints - **added** — Add OCI type support for JFrog registry - **added** — Add DeleteTag support for both AWS and Azure container registry adapters - **added** — Support Cosign v3 Bundle signature format - **changed** — Disable land tag in the backend storage - **changed** — Allow disabling audit log to database during initialization - **changed** — Update and improve Traditional Chinese locale - **changed** — OIDC integration now handles cases where a user has only a single group - **fixed** — Fix robot API call to users endpoint - **fixed** — Correct parameter in registry upload status query - **fixed** — Support both docker-compose v1 and docker compose v2 - **fixed** — Fix typo in Korean placeholder and update strings - **fixed** — Remove unwanted scrollbar from tag retention UI - **fixed** — Correct typo in artifact_type column definition - **fixed** — Fix errors related to search user and search groups - **removed** — Remove unused SYNC_QUOTA from environment template - **removed** — Remove legacy switch from decodeFilters ##### What's Changed ###### Exciting New Features 🎉 * add tag deletion option for gc by @wy65701436 in https://github.com/goharbor/harbor/pull/22382 * Add UI for limit upstream registry connection by @stonezdj in https://github.com/goharbor/harbor/pull/22406 * disable land tag in the backend storage by @wy65701436 in https://github.com/goharbor/harbor/pull/22507 ###### Enhancement 🚀 * Add max_upstream_conn parameter for each proxy_cache project by @stonezdj in https://github.com/goharbor/harbor/pull/22348 * add per-endpoint CA certificate support for registry endpoints by @wy65701436 in https://github.com/goharbor/harbor/pull/22535 * Add oci type support for jfrog registry by @stonezdj in https://github.com/goharbor/harbor/pull/22589 * add DeleteTag support for both aws and azure cr adapters by @shaiatias in https://github.com/goharbor/harbor/pull/22227 ###### Component updates ⬆️ * Remove unused SYNC_QUOTA from env.jinja template by @mxab in https://github.com/goharbor/harbor/pull/22280 * bump base to v2.15.0 by @wy65701436 in https://github.com/goharbor/harbor/pull/22316 * chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22304 * chore(deps): bump github.com/aws/aws-sdk-go from 1.55.6 to 1.55.8 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22306 * chore(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22305 * chore(deps): bump golang.org/x/text from 0.27.0 to 0.29.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22338 * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.29 to 1.1.31 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22337 * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.32 to 1.1.34 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22356 * chore(deps): bump golang.org/x/time from 0.12.0 to 0.13.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22360 * chore(deps): bump k8s.io/client-go from 0.33.3 to 0.34.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22359 * chore(deps): bump github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.19.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22358 * chore(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.15.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22357 * chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.59.0 to 0.63.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22379 * fix robot issue-21406 by @wy65701436 in https://github.com/goharbor/harbor/pull/22387 * Update and improve zh-TW Traditional Chinese locale by @PeterDaveHello in https://github.com/goharbor/harbor/pull/22423 * Allow disable audit log to DB when initialize by @wy65701436 in https://github.com/goharbor/harbor/pull/22452 * Update zh-TW Traditional Chinese locale by @PeterDaveHello in https://github.com/goharbor/harbor/pull/22468 * add migraiton sql for skip_audit_log_database by @wy65701436 in https://github.com/goharbor/harbor/pull/22487 * refactor: use strings.Builder to improve performance by @rocksload in https://github.com/goharbor/harbor/pull/22453 * refactor: replace Split in loops with more efficient SplitSeq by @rustversion in https://github.com/goharbor/harbor/pull/22494 * refactor the logic to init skip_audit_log_database by @wy65701436 in https://github.com/goharbor/harbor/pull/22493 * chore(deps): bump golang.org/x/net from 0.41.0 to 0.46.0 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22457 * Remove legacy switch from decodeFilters after UI bug #12579 fix by @intoj _[Truncated at 4000 characters — full notes: https://github.com/goharbor/harbor/releases/tag/v2.15.0]_