Skip to content

harbor

v2.15.2 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 24d Artifact Management
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

cloud-native cncf cncf-project container container-management container-registry
+5 more
containers docker helm kubernetes registry

Affected surfaces

auth crypto_tls

Summary

AI summary

Broad release touches Component updates ⬆️, Bump Component Version 🤖, cherry-pick, and Other Changes.

Full changelog

What's Changed

Component updates ⬆️

  • [CHERRY-PICK] Make openapi-generator-cli download URL configurable (#23186) by @chlins in https://github.com/goharbor/harbor/pull/23221
  • bump Go version from 1.25.9 to 1.26.3 by @stonezdj in https://github.com/goharbor/harbor/pull/23236
  • [cherry-pick] Rebuild goharbor/photon image before create new harbor base images by @jUDASmILE in https://github.com/goharbor/harbor/pull/23250
  • [cherry-pick]remove install net-tools from db dockerfile as photon removed it by @jUDASmILE in https://github.com/goharbor/harbor/pull/23267
  • [CHERRY-PICK] feat: replace redis with valkey as cache backend (#23157) by @chlins in https://github.com/goharbor/harbor/pull/23261
  • [CHERRY-PICK] test(cosign): disable tlog for signing checks by @chlins in https://github.com/goharbor/harbor/pull/23280
  • [CHERRY-PICK] fix(cosign): ignore tlog during verification by @chlins in https://github.com/goharbor/harbor/pull/23286
  • [CHERRY-PICK] fix: Bump repository update_time on tag and artifact changes (#23225) by @chlins in https://github.com/goharbor/harbor/pull/23292
  • [CHERRY-PICK] fix(security): validate blob-mount source project and reject tokens missing iat (#23270) by @Vad1mo in https://github.com/goharbor/harbor/pull/23297
  • (cherry-pick) Upgrade harbor go.mod OSS packages by @stonezdj in https://github.com/goharbor/harbor/pull/23328
  • [cherry-pick] Harden crypto usage and drop unused SMTP package (#23307) by @wy65701436 in https://github.com/goharbor/harbor/pull/23356
  • (cherry-pick) Update Makefile PIP_INDEX_URL to use default value if not defined by @stonezdj in https://github.com/goharbor/harbor/pull/23377
  • [Backport 2.15.0] test(api_db): support dynamic OpenAPI generator and PyPI URLs via env vars by @fiona-xie in https://github.com/goharbor/harbor/pull/23381
  • bump golang to v1.26.4 by @wy65701436 in https://github.com/goharbor/harbor/pull/23382
  • (cherry-pick) Upgrade Harbor UI to Angular 21, Clarity v18, and Node.js v22 by @stonezdj in https://github.com/goharbor/harbor/pull/23379
  • [Cherry-Pick] test(ui): Fix db_schedule and replication failed cases after Angular&Clarity upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23395
  • (cherry-pick) fix UI issues across portal components by @stonezdj in https://github.com/goharbor/harbor/pull/23399
  • cherry-pick: fix(ui): use selected tag for pull command copy (#23240) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23426
  • cherry-pick: fix(ui): fix UI issues #48–#54 across portal components (#23427) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23428
  • Fix build issue related to npm package by @stonezdj in https://github.com/goharbor/harbor/pull/23435
  • [cherry-pick] fix: multiple UI/UX fixes for checkboxes, alignment, dark theme, and i18n (#23439) to release-2.15.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23440
  • [cherry-pick] fix(portal): align pending job queue counts and improve form styling by @wy65701436 in https://github.com/goharbor/harbor/pull/23459
  • build(registry): update registry source tag to rc.5 by @chlins in https://github.com/goharbor/harbor/pull/23465

Bump Component Version 🤖

  • bump harbor v2.15.2 by @wy65701436 in https://github.com/goharbor/harbor/pull/23362
  • (cherry-pick)Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml by @stonezdj in https://github.com/goharbor/harbor/pull/23378
  • Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23386
  • Bump Trivy adapter version to v0.37.1 by @stonezdj in https://github.com/goharbor/harbor/pull/23422
  • Bump base photon OS image by @stonezdj in https://github.com/goharbor/harbor/pull/23424
  • sync package-lock.json in UI by @stonezdj in https://github.com/goharbor/harbor/pull/23431
  • Bump trivy(0.72.0) and trivy adatper(0.38.0) by @stonezdj in https://github.com/goharbor/harbor/pull/23480
  • build(registry): use stable registry source tag v2.8.3-harbor.1 by @chlins in https://github.com/goharbor/harbor/pull/23482
  • update base image by @stonezdj in https://github.com/goharbor/harbor/pull/23485

Other Changes

  • [CHERRY-PICK] support configurable PIP_INDEX_URL for swagger client build (#23241) by @stonezdj in https://github.com/goharbor/harbor/pull/23242
  • build: use dev-legacy tags to decouple 2.15 builds from main by @wy65701436 in https://github.com/goharbor/harbor/pull/23360
  • [Backport 2.15.0] test(UI): fix UI robot test cases for Angular and Clarity Upgrade by @fiona-xie in https://github.com/goharbor/harbor/pull/23380
  • [Cherry-Pick] test(ui): add retry for Get Harbor CA to improve stability (#23396) by @fiona-xie in https://github.com/goharbor/harbor/pull/23405
  • Downgrade node-release to 2.0.48 for build compatibility by @stonezdj in https://github.com/goharbor/harbor/pull/23432

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.1...v2.15.2

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track harbor

Get notified when new releases ship.

Sign up free

About harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

All releases →

Related context

Beta — feedback welcome: [email protected]