# Harbor v2.15.2 - Product: Harbor (https://whatsnew.fyi/product/harbor) - Vendor: CNCF - Date: 2026-07-02 - Version: v2.15.2 - Original notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2 - Permalink: https://whatsnew.fyi/product/harbor/releases/v2.15.2 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **changed** — Make openapi-generator-cli download URL configurable - **changed** — Bump Go version from 1.25.9 to 1.26.3 - **changed** — Replace redis with valkey as cache backend - **fixed** — Ignore tlog during cosign verification - **fixed** — Bump repository update_time on tag and artifact changes - **security** — Validate blob-mount source project and reject tokens missing iat - **changed** — Harden crypto usage and drop unused SMTP package - **changed** — Support dynamic OpenAPI generator and PyPI URLs via environment variables - **changed** — Bump golang to v1.26.4 - **changed** — Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 - **fixed** — Fix UI issues across portal components - **fixed** — Use selected tag for pull command copy - **fixed** — Fix multiple UI/UX issues for checkboxes, alignment, dark theme, and i18n - **fixed** — Align pending job queue counts and improve form styling - **changed** — Update registry source tag to rc.5 - **changed** — Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml - **changed** — Bump trivy to v0.72.0 and trivy adapter to v0.38.0 - **changed** — Use stable registry source tag v2.8.3-harbor.1 - **changed** — Support configurable PIP_INDEX_URL for swagger client build ##### What's Changed ###### Component updates ⬆️ * [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221 * bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236 * [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250 * [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267 * [CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261 * [CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280 * [CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286 * [CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292 * [CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297 * (cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328 * [cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356 * (cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377 * [Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381 * bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382 * (cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379 * [Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395 * (cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399 * cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426 * cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428 * Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435 * [cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440 * [cherry-pick] fix(portal): align pending job queue counts and improve form styling by @wy65701436 in https://github.com/goharbor/harbor/pull/23459 * build(registry): update registry source tag to rc.5 by @chlins in https://github.com/goharbor/harbor/pull/23465 ###### Bump Component Version 🤖 * bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362 * (cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378 * Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386 * Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422 * Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424 * sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431 * Bump trivy(0.72.0) and trivy adatper(0.38.0) by @stonezdj in https:/ _[Truncated at 4000 characters — full notes: https://github.com/goharbor/harbor/releases/tag/v2.15.2]_