Skip to content

harbor

Artifact Management

An open‑source trusted registry that stores, signs, scans, and replicates container images and Helm charts.

Go Latest v2.14.4 · 24d ago Security brief →

Features

  • Cloud native registry for both container images and Helm charts
  • Role‑based access control via projects with fine‑grained permissions
  • Policy‑driven replication between multiple Harbor instances

Recent releases

View all 7 releases →
v2.14.4 Bug fix
⚠ Upgrade required
  • Bumped Go to version 1.25.9
  • Updated base image to goharbor/photon:5.0
  • Upgraded go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose packages
Full changelog

What's Changed

Component updates ⬆️

  • [CHERRY_PICK] fix(session): fix SessionRegenerate save args and lifetime by @chlins in https://github.com/goharbor/harbor/pull/22882
  • [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23098
  • (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23109
  • (cherry-pick) Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23208
  • bump Go to 1.25.9 and use goharbor/photon:5.0 base images by @stonezdj in https://github.com/goharbor/harbor/pull/23204
  • Bump up the go.opentelemetry.io/otel/sdk and github.com/go-jose/go-jose package by @stonezdj in https://github.com/goharbor/harbor/pull/23215
  • (cherry-pick) Fix the issue distribution instance edit without creden… by @chlins in https://github.com/goharbor/harbor/pull/23220

Full Changelog: https://github.com/goharbor/harbor/compare/v2.14.3...v2.14.4

v2.15.1 Bug fix
Security fixes
  • Update photon packages to fix CVEs
Full changelog

What's Changed

Component updates ⬆️

  • (cherry-pick) Fix Last Pull time on parent/child artifacts and on creation by @stonezdj in https://github.com/goharbor/harbor/pull/23022
  • (cherry-pick) Add User-Agent to all request by @stonezdj in https://github.com/goharbor/harbor/pull/23054
  • (cherry-pick): fix proxy cache serve local on remote not found by @stonezdj in https://github.com/goharbor/harbor/pull/23049
  • [cherry-pick] Call /v2/auth/token api to get bearer token for dockerhub adapter by @stonezdj in https://github.com/goharbor/harbor/pull/23096
  • [CHERRY-PICK] feat(session): prevent background polling from renewing session TTL by @chlins in https://github.com/goharbor/harbor/pull/23097
  • (cherry-pick) Fix issue related to scanner API by @stonezdj in https://github.com/goharbor/harbor/pull/23108
  • bump base for v2.15.1 by @wy65701436 in https://github.com/goharbor/harbor/pull/23120
  • [CHERRY-PICK] fix(gc): redact redis_url_reg from GC extra attrs (#23134) by @chlins in https://github.com/goharbor/harbor/pull/23141
  • (cherry-pick) Fix the issue distribution instance edit without credential can not save by @stonezdj in https://github.com/goharbor/harbor/pull/23166
  • Update photon packages to fix CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/23176
  • Revert the previous change in Dockerfile.base and change base image to goharbor/photon:5.0 by @stonezdj in https://github.com/goharbor/harbor/pull/23180

Bump Component Version 🤖

  • bump go to 1.25.9 and refresh base images by @stonezdj in https://github.com/goharbor/harbor/pull/23150
  • Upgrade go deps go-jose and otel sdk by @stonezdj in https://github.com/goharbor/harbor/pull/23158

Full Changelog: https://github.com/goharbor/harbor/compare/v2.15.0...v2.15.1

v2.15.0 Breaking risk
Security fixes
  • Reject bearer tokens issued before project creation
Notable features
  • Tag deletion option for garbage collection
  • UI for limiting upstream registry connections
  • Per-endpoint CA certificate support and OCI type for Jfrog
v2.13.5 Security relevant
Security fixes
  • Reject bearer tokens issued before project creation
v2.14.3 Security relevant
Security fixes
  • Reject bearer tokens issued before project creation

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
28,623
Forks
5,242
Languages
Go TypeScript HTML

Install & Platforms

Install via
docker helm

Community & Support

Beta — feedback welcome: [email protected]