.buildbaselog

@@ -1,5 +1,5 @@
 # Please add memo for logging the reason to trigger build base images action.
-# Note: 
+# Note:
 #    Any modifiction of this file will trigger base images build action.
 
 
@@ -8,6 +8,15 @@
 *   Add date here... Add signature here...
 -   Add your reason here...
 
+*   Jul 20 2023 <jiaoya@vmware.com>
+-   Refresh base image
+
+*   May 09 2023 <jiaoya@vmware.com>
+-   Refresh base image
+
+*   Apr 12 2023 <jiaoya@vmware.com>
+-   Refresh base image
+
 *   Nov 28 2022 <jiaoya@vmware.com>
 -   Refresh base image
 
@@ -27,4 +36,4 @@
 -   Refresh base image
 
 *   Jul 15 2021 <danfengl@vmware.com>
--   Create this file to trigger build base action in buld-package workflow 
+-   Create this file to trigger build base action in buld-package workflow

.github/auto-assignees.yml

@@ -4,7 +4,7 @@ addAssignees: true
 
 addReviewers: false
 
-reviewers:
+assignees:
   - wy65701436
   - Vad1mo
   - OrlinVasilev
@@ -14,11 +14,4 @@ reviewers:
   - MinerYang
   - AllForNothing
 
-options:
-  ignore_draft: true
-  ignored_keywords:
-    - WIP
-    - wip
-    - DO NOT MERGE
-  enable_group_assignment: true
-  number_of_reviewers: 3
+numberOfAssignees: 3

.github/dependabot.yml

@@ -13,7 +13,6 @@ updates:
       interval: "daily"
     labels:
       - "release-note/infra"
-      - "release-note/update"
     assignees:
       - "OrlinVasilev"
     reviewers:

.github/workflows/CI.yml

@@ -16,9 +16,13 @@ env:
 
 on:
   pull_request:
+    paths-ignore:
+      - 'docs/**'
+      - '**.md'
   push:
     paths-ignore:
-    - 'docs/**'
+      - 'docs/**'
+      - '**.md'
 
 jobs:
   UTTEST:
@@ -29,16 +33,11 @@ jobs:
       - ubuntu-latest
     timeout-minutes: 100
     steps:
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-           go-version: 1.19.3
+           go-version: 1.20.7
         id: go
-      - name: setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
-        with:
-          docker_version: 20.04
-          docker_channel: stable
       - uses: actions/checkout@v3
         with:
          path: src/github.com/goharbor/harbor
@@ -95,16 +94,11 @@ jobs:
       - ubuntu-latest
     timeout-minutes: 100
     steps:
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-          go-version: 1.19.3
+          go-version: 1.20.7
         id: go
-      - name: setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
-        with:
-          docker_version: 18.09
-          docker_channel: stable
       - uses: actions/checkout@v3
         with:
           path: src/github.com/goharbor/harbor
@@ -155,16 +149,11 @@ jobs:
       - ubuntu-latest
     timeout-minutes: 100
     steps:
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-          go-version: 1.19.3
+          go-version: 1.20.7
         id: go
-      - name: setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
-        with:
-          docker_version: 18.09
-          docker_channel: stable
       - uses: actions/checkout@v3
         with:
           path: src/github.com/goharbor/harbor
@@ -215,16 +204,11 @@ jobs:
       - ubuntu-latest
     timeout-minutes: 100
     steps:
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-          go-version: 1.19.3
+          go-version: 1.20.7
         id: go
-      - name: setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
-        with:
-          docker_version: 18.09
-          docker_channel: stable
       - uses: actions/checkout@v3
         with:
           path: src/github.com/goharbor/harbor
@@ -273,16 +257,11 @@ jobs:
       - ubuntu-latest
     timeout-minutes: 100
     steps:
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-          go-version: 1.19.3
+          go-version: 1.20.7
         id: go
-      - name: setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
-        with:
-          docker_version: 18.09
-          docker_channel: stable
       - uses: actions/checkout@v3
         with:
           path: src/github.com/goharbor/harbor
@@ -332,7 +311,7 @@ jobs:
     steps:
       - uses: actions/setup-node@v3
         with:
-          node-version: '16'
+          node-version: '18'
       - uses: actions/checkout@v3
         with:
           path: src/github.com/goharbor/harbor

.github/workflows/build-package.yml

@@ -16,22 +16,22 @@ jobs:
       - ubuntu-20.04
     steps:
       - uses: actions/checkout@v3
-      - uses: 'google-github-actions/auth@v0'
+      - uses: 'google-github-actions/auth@v1'
         with:
           credentials_json: '${{ secrets.GCP_CREDENTIALS }}'
       - uses: google-github-actions/setup-gcloud@v0
         with:
-          version: '285.0.0'
+          version: '430.0.0'
       - run: gcloud info
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-          go-version: 1.19.3
+          go-version: 1.20.7
         id: go
       - name: Setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
+        uses: docker-practice/actions-setup-docker@master
         with:
-          docker_version: 18.09
+          docker_version: 20.10
           docker_channel: stable
       - uses: actions/checkout@v3
       - uses: jitterbit/get-changed-files@v1
@@ -88,8 +88,8 @@ jobs:
           else
             build_base_params=" BUILD_BASE=true PUSHBASEIMAGE=true REGISTRYUSER=\"${{ secrets.DOCKER_HUB_USERNAME }}\" REGISTRYPASSWORD=\"${{ secrets.DOCKER_HUB_PASSWORD }}\""
           fi
-          sudo make package_offline GOBUILDTAGS="include_oss include_gcs" BASEIMAGETAG=${Harbor_Build_Base_Tag} VERSIONTAG=${Harbor_Assets_Version} PKGVERSIONTAG=${Harbor_Package_Version} NOTARYFLAG=true CHARTFLAG=true TRIVYFLAG=true HTTPPROXY= ${build_base_params}
-          sudo make package_online GOBUILDTAGS="include_oss include_gcs" BASEIMAGETAG=${Harbor_Build_Base_Tag} VERSIONTAG=${Harbor_Assets_Version} PKGVERSIONTAG=${Harbor_Package_Version} NOTARYFLAG=true CHARTFLAG=true TRIVYFLAG=true HTTPPROXY= ${build_base_params}
+          sudo make package_offline GOBUILDTAGS="include_oss include_gcs" BASEIMAGETAG=${Harbor_Build_Base_Tag} VERSIONTAG=${Harbor_Assets_Version} PKGVERSIONTAG=${Harbor_Package_Version} NOTARYFLAG=true TRIVYFLAG=true HTTPPROXY= ${build_base_params}
+          sudo make package_online GOBUILDTAGS="include_oss include_gcs" BASEIMAGETAG=${Harbor_Build_Base_Tag} VERSIONTAG=${Harbor_Assets_Version} PKGVERSIONTAG=${Harbor_Package_Version} NOTARYFLAG=true TRIVYFLAG=true HTTPPROXY= ${build_base_params}
           harbor_offline_build_bundle=$(basename harbor-offline-installer-*.tgz)
           harbor_online_build_bundle=$(basename harbor-online-installer-*.tgz)
           echo "Package name is: $harbor_offline_build_bundle"

.github/workflows/codeql-analysis.yml

@@ -2,7 +2,13 @@ name: "Code scanning - action"
 
 on:
   push:
+    paths-ignore:
+      - 'docs/**'
+      - '**.md'
   pull_request:
+    paths-ignore:
+      - 'docs/**'
+      - '**.md'
   schedule:
     - cron: '0 16 * * 6'
 

.github/workflows/conformance_test.yml

@@ -20,21 +20,16 @@ jobs:
       - uses: actions/checkout@v3
       - id: 'auth'
         name: 'Authenticate to Google Cloud'
-        uses: google-github-actions/auth@v0
+        uses: google-github-actions/auth@v1
         with:
           credentials_json: '${{ secrets.GCP_CREDENTIALS }}'
       - uses: google-github-actions/setup-gcloud@v0
       - run: gcloud info
-      - name: Set up Go 1.19
+      - name: Set up Go 1.20
         uses: actions/setup-go@v1
         with:
-          go-version: 1.19.3
+          go-version: 1.20.7
         id: go
-      - name: setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
-        with:
-          docker_version: 18.09
-          docker_channel: stable
       - uses: actions/checkout@v3
         with:
           path: src/github.com/goharbor/harbor

.github/workflows/housekeeping-stale-issues-prs.yaml

@@ -7,7 +7,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v6.0.1
+      - uses: actions/stale@v8.0.0
         with:
           stale-issue-message: 'This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.'
           stale-pr-message: 'This PR is being marked stale due to a period of inactivty. If this PR is still relevant, please comment or remove the stale label. Otherwise, this PR will close in 30 days.'

.github/workflows/label_check.yaml

@@ -16,7 +16,7 @@ jobs:
     name: Check release-note label set
     runs-on: ubuntu-latest
     steps:
-      - uses: mheap/github-action-required-labels@v2
+      - uses: mheap/github-action-required-labels@v3
         with:
           mode: minimum
           count: 1

.github/workflows/nightly-trivy-scan.yml

@@ -13,7 +13,7 @@ jobs:
         # maintain the versions of harbor that need to be actively
         # security scanned
         # TODO have to add 2.7 version also once it is released
-        versions: [dev]
+        versions: [dev, v2.7.0-dev]
         # list of images that need to be scanned
         images: [harbor-core, harbor-db, harbor-exporter, harbor-jobservice, harbor-log, harbor-portal, harbor-registryctl, prepare]
     permissions:

.github/workflows/publish_release.yml

@@ -19,12 +19,12 @@ jobs:
           echo "PRE_TAG=$(echo $release | jq -r '.body' | jq -r '.preTag')" >> $GITHUB_ENV
           echo "BRANCH=$(echo $release | jq -r '.target_commitish')" >> $GITHUB_ENV
           echo "PRERELEASE=$(echo $release | jq -r '.prerelease')" >> $GITHUB_ENV
-      - uses: 'google-github-actions/auth@v0'
+      - uses: 'google-github-actions/auth@v1'
         with:
           credentials_json: '${{ secrets.GCP_CREDENTIALS }}'
       - uses: google-github-actions/setup-gcloud@v0
         with:
-          version: '285.0.0'
+          version: '430.0.0'
       - name: Prepare Assets
         run: |
           if [ ! ${{ env.BUILD_NO }} -o ${{ env.BUILD_NO }} = "null" ]
@@ -50,15 +50,18 @@ jobs:
           echo "ONLINE_PACKAGE_PATH=$assets_path/$dst_online_package" >> $GITHUB_ENV
           echo "MD5SUM_PATH=$assets_path/md5sum" >> $GITHUB_ENV
       - name: Setup Docker
-        uses: docker-practice/actions-setup-docker@1.0.11
+        uses: docker-practice/actions-setup-docker@master
         with:
-          docker_version: 18.09
+          docker_version: 20.10
           docker_channel: stable
       - name: Publish Images
         run: |
           tar -zxf ${{ env.OFFLINE_PACKAGE_PATH }}
           docker load -i ./harbor/harbor.${{ env.BASE_TAG }}.tar.gz
-          source tools/release/release_utils.sh && publishImages ${{ env.CUR_TAG }} ${{ env.BASE_TAG }} ${{ secrets.DOCKER_HUB_USERNAME }} ${{ secrets.DOCKER_HUB_PASSWORD }}
+          images="$(docker images --format "{{.Repository}}" --filter=reference='goharbor/*:${{ env.BASE_TAG }}' | xargs)"
+          source tools/release/release_utils.sh
+          publishImages ${{ env.CUR_TAG }} ${{ env.BASE_TAG }} ${{ secrets.DOCKER_HUB_USERNAME }} ${{ secrets.DOCKER_HUB_PASSWORD }} $images
+          publishPackages ${{ env.CUR_TAG }} ${{ env.BASE_TAG }} ${{ github.actor }} ${{ secrets.GITHUB_TOKEN }} $images
       - name: Generate release notes
         run: |
           release_notes_path=$(pwd)/release-notes.txt
@@ -83,4 +86,4 @@ jobs:
             ${{ env.OFFLINE_PACKAGE_PATH }}.asc
             ${{ env.ONLINE_PACKAGE_PATH }}
             ${{ env.ONLINE_PACKAGE_PATH }}.asc
-            ${{ env.MD5SUM_PATH }}
+            ${{ env.MD5SUM_PATH }}

.gitignore

@@ -33,7 +33,7 @@ src/portal/typings/
 .vscode/
 **/node_modules
 **/ssl/
-**/proxy.config.json
+**/proxy.config.mjs
 
 src/portal/src/**/*.js
 src/portal/src/**/*.js.map

ADOPTERS.md

@@ -75,7 +75,7 @@ and manages more than 3,000 images.
 CI/CD pipeline for more than a year housing hundreds of images for various
 environments.
 
-**AWN:** Utilizes Harbor as a secure image repository for all of internal
+**AWN:** Utilizes Harbor as a secure image repository for all internal
 container-based workloads. Harbor provides developers and sysadmins a secure
 and easy-to-use repository. AWN leverages the image vulnerability scanning
 feature within Harbor before deploying images into production.