Skip to content

Releases: goharbor/harbor

v2.11.2-rc1

15 Nov 08:55
201d421
Compare
Choose a tag to compare
v2.11.2-rc1 Pre-release
Pre-release

What's Changed

Component updates ⬆️

New Contributors

Full Changelog: v2.11.1...v2.11.2-rc1

v2.12.0

08 Nov 09:40
9da38ae
Compare
Choose a tag to compare

What's Changed

Exciting New Features 🎉

Enhanced robot account 🎉

The enhancements to the robot account functionality in Harbor v2.12.0, aimed at improving access control and automation in CI/CD processes. Key changes include additional configuration options for better integration and security management. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/Robot-Account-Expand.md

Speed limit of proxy cache project 🎉

Harbor now supports to set the speed limit for the proxy cache projects. After Harbor v2.12.0, the user is able to simple control network speed when pulling artifacts from proxy cache projects.

Enhanced LDAP on-boarding process

In v2.12.0, Harbor enhances the LDAP onboarding process to improve user login performance. This revision addresses previous performance issues, ensuring a smoother authentication experience.

Integration with ACR & ACR EE Registry

Users can now seamlessly replicate images to and from the ACR & ACR EE registry, enhancing interoperability and flexibility within the Harbor ecosystem.

Enhancement 🚀

Component updates ⬆️

  • Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in #20450
  • Fix - 20469 sbom status and download issue by @xuelichao in #20471
  • chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in #20455
  • chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in #20451
  • chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in #20453
  • Add sbom_report table to store sbom related information by @stonezdj in #20473
  • Separate the execution vendor type sbom from image_scan by @stonezdj in #20504
  • Fix multiple SBOM by @wy65701436 in #20503
  • Fix tooltip issue related to SBOM.Details by @stonezdj in #20510
  • tls support for pushing sbom by @wy65701436 in #20514
  • fix 20518 by @wy65701436 in #20521
  • fix http client to push sbom accessory by @wy65701436 in #20525
  • Response an error message when there is incomplete sbom generate job by @stonezdj in #20526
  • No sbom_overview when sbom is deleted by @stonezdj in #20533
  • Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in #20538
  • chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in #20487
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in #20542
  • chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in #20541
  • chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in #20488
  • Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20545
  • Use internal registry url to push artifact accessory by @stonezdj in #20575
  • Remove the delete local manifest when remote doesn't exist by @stonezdj in #20597
  • fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in #20603
  • fix: reduce the execution sweep job frequency from hourly to daily by @chlins in #20601
  • Add menu item for ko_KR local by @stonezdj in #20602
  • fix: hide the scan related button when installation without scanner by @chlins in #20616
  • chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in #20567
  • chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in #20609
  • Add translation for zh_CN by @stonezdj in #20617
  • fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20652
  • Add SBOM translation for fr_FR by @flbla in #20625
  • bump up beego to v2.2.1 by @MinerYang in #20555
  • fix: correct the API data for the dependencies of the helm chart by @chlins in #20676
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in #20653
  • chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in #20655
  • chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in #20656
  • JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in #20684
  • Change the log message when PostScan failed. by @stonezdj in #20650
  • feat: bump mockery and switch to generate by config file by @chlins in #20742
  • chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in #20713
  • chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in #20715
  • make distribution_src configurable by @MinerYang in #20769
  • chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in #20716
  • chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in #20721
  • refactor: unify the mock file generation by @chlins in #20765
  • Extend AWS ECR regex for c2s support by @ethanchowell in #20648
  • remove migrate-patch by @kariya-mitsuru in #20619
  • Check create when fire the artifact event by @stonezdj in #20832
  • fix: fix the GC job index data race by @chlins in #20830
  • fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in #20858
  • fix: migrate cicd to registry goharbor by @zyyw in #20872
  • Fixed the ui bug of banner coming over the search result container by @kunal-511 in #20871
  • refactor: remove useless error check for scan data export job by @chlins in #20883
  • Escape the - with - when it is a char of itself by @stonezdj in #20892
  • chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in #20878
  • chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in #20783
  • chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in #20888
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in #20879
  • chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in #20785
  • chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in #20784
  • update robot creator database scheme by @wy65701436 in #20918
    ...
Read more

v2.12.0-rc2

07 Nov 09:11
9da38ae
Compare
Choose a tag to compare
v2.12.0-rc2 Pre-release
Pre-release

What's Changed

Exciting New Features 🎉

Enhancement 🚀

Component updates ⬆️

  • Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in #20450
  • Fix - 20469 sbom status and download issue by @xuelichao in #20471
  • chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in #20455
  • chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in #20451
  • chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in #20453
  • Add sbom_report table to store sbom related information by @stonezdj in #20473
  • Separate the execution vendor type sbom from image_scan by @stonezdj in #20504
  • Fix multiple SBOM by @wy65701436 in #20503
  • Fix tooltip issue related to SBOM.Details by @stonezdj in #20510
  • tls support for pushing sbom by @wy65701436 in #20514
  • fix 20518 by @wy65701436 in #20521
  • fix http client to push sbom accessory by @wy65701436 in #20525
  • Response an error message when there is incomplete sbom generate job by @stonezdj in #20526
  • No sbom_overview when sbom is deleted by @stonezdj in #20533
  • Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in #20538
  • chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in #20487
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in #20542
  • chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in #20541
  • chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in #20488
  • Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20545
  • Use internal registry url to push artifact accessory by @stonezdj in #20575
  • Remove the delete local manifest when remote doesn't exist by @stonezdj in #20597
  • fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in #20603
  • fix: reduce the execution sweep job frequency from hourly to daily by @chlins in #20601
  • Add menu item for ko_KR local by @stonezdj in #20602
  • fix: hide the scan related button when installation without scanner by @chlins in #20616
  • chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in #20567
  • chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in #20609
  • Add translation for zh_CN by @stonezdj in #20617
  • fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20652
  • Add SBOM translation for fr_FR by @flbla in #20625
  • bump up beego to v2.2.1 by @MinerYang in #20555
  • fix: correct the API data for the dependencies of the helm chart by @chlins in #20676
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in #20653
  • chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in #20655
  • chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in #20656
  • JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in #20684
  • Change the log message when PostScan failed. by @stonezdj in #20650
  • feat: bump mockery and switch to generate by config file by @chlins in #20742
  • chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in #20713
  • chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in #20715
  • make distribution_src configurable by @MinerYang in #20769
  • chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in #20716
  • chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in #20721
  • refactor: unify the mock file generation by @chlins in #20765
  • Extend AWS ECR regex for c2s support by @ethanchowell in #20648
  • remove migrate-patch by @kariya-mitsuru in #20619
  • Check create when fire the artifact event by @stonezdj in #20832
  • fix: fix the GC job index data race by @chlins in #20830
  • fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in #20858
  • fix: migrate cicd to registry goharbor by @zyyw in #20872
  • Fixed the ui bug of banner coming over the search result container by @kunal-511 in #20871
  • refactor: remove useless error check for scan data export job by @chlins in #20883
  • Escape the - with - when it is a char of itself by @stonezdj in #20892
  • chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in #20878
  • chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in #20783
  • chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in #20888
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in #20879
  • chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in #20785
  • chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in #20784
  • update robot creator database scheme by @wy65701436 in #20918
  • Update fr-fr-lang.json by @tostt in #20942
  • fix: p2p instance test connection by @chlins in #20968
  • update golang version by @wy65701436 in #21014
  • add prepare migration script for 2.12.0 by @MinerYang in #21022
  • chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in #21008
  • chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in #20983
  • feat: support Alibaba ACR proxy cache type by @njucjc in #19692
  • chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in #20984
  • remove the robot update permission by @wy65701436 in #21028
  • Change the log level from warning to debug to avoid noise when there … by @stonezdj in https://github.com/goharbor/harbor/pull/...
Read more

v2.12.0-rc1

27 Oct 17:15
b3dab7a
Compare
Choose a tag to compare
v2.12.0-rc1 Pre-release
Pre-release

What's Changed

Exciting New Features 🎉

Enhancement 🚀

Component updates ⬆️

  • Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in #20450
  • Fix - 20469 sbom status and download issue by @xuelichao in #20471
  • chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in #20455
  • chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in #20451
  • chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in #20453
  • Add sbom_report table to store sbom related information by @stonezdj in #20473
  • Separate the execution vendor type sbom from image_scan by @stonezdj in #20504
  • Fix multiple SBOM by @wy65701436 in #20503
  • Fix tooltip issue related to SBOM.Details by @stonezdj in #20510
  • tls support for pushing sbom by @wy65701436 in #20514
  • fix 20518 by @wy65701436 in #20521
  • fix http client to push sbom accessory by @wy65701436 in #20525
  • Response an error message when there is incomplete sbom generate job by @stonezdj in #20526
  • No sbom_overview when sbom is deleted by @stonezdj in #20533
  • Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in #20538
  • chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in #20487
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in #20542
  • chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in #20541
  • chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in #20488
  • Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20545
  • Use internal registry url to push artifact accessory by @stonezdj in #20575
  • Remove the delete local manifest when remote doesn't exist by @stonezdj in #20597
  • fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in #20603
  • fix: reduce the execution sweep job frequency from hourly to daily by @chlins in #20601
  • Add menu item for ko_KR local by @stonezdj in #20602
  • fix: hide the scan related button when installation without scanner by @chlins in #20616
  • chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in #20567
  • chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in #20609
  • Add translation for zh_CN by @stonezdj in #20617
  • fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20652
  • Add SBOM translation for fr_FR by @flbla in #20625
  • bump up beego to v2.2.1 by @MinerYang in #20555
  • fix: correct the API data for the dependencies of the helm chart by @chlins in #20676
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in #20653
  • chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in #20655
  • chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in #20656
  • JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in #20684
  • Change the log message when PostScan failed. by @stonezdj in #20650
  • feat: bump mockery and switch to generate by config file by @chlins in #20742
  • chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in #20713
  • chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in #20715
  • make distribution_src configurable by @MinerYang in #20769
  • chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in #20716
  • chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in #20721
  • refactor: unify the mock file generation by @chlins in #20765
  • Extend AWS ECR regex for c2s support by @ethanchowell in #20648
  • remove migrate-patch by @kariya-mitsuru in #20619
  • Check create when fire the artifact event by @stonezdj in #20832
  • fix: fix the GC job index data race by @chlins in #20830
  • fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in #20858
  • fix: migrate cicd to registry goharbor by @zyyw in #20872
  • Fixed the ui bug of banner coming over the search result container by @kunal-511 in #20871
  • refactor: remove useless error check for scan data export job by @chlins in #20883
  • Escape the - with - when it is a char of itself by @stonezdj in #20892
  • chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in #20878
  • chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in #20783
  • chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in #20888
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in #20879
  • chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in #20785
  • chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in #20784
  • update robot creator database scheme by @wy65701436 in #20918
  • Update fr-fr-lang.json by @tostt in #20942
  • fix: p2p instance test connection by @chlins in #20968
  • update golang version by @wy65701436 in #21014
  • add prepare migration script for 2.12.0 by @MinerYang in #21022
  • chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in #21008
  • chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in #20983
  • feat: support Alibaba ACR proxy cache type by @njucjc in #19692
  • chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in #20984
  • remove the robot update permission by @wy65701436 in #21028
  • Change the log level from warning to deb...
Read more

v1.10.19

20 Sep 03:11
b1a5617
Compare
Choose a tag to compare

What's Changed

Full Changelog: v1.10.18...v1.10.19

v1.10.19-rc1

11 Sep 04:00
b1a5617
Compare
Choose a tag to compare
v1.10.19-rc1 Pre-release
Pre-release

What's Changed

Full Changelog: v1.10.18...v1.10.19-rc1

v2.11.1

21 Aug 02:24
6b7ecba
Compare
Choose a tag to compare

What's Changed

Component updates ⬆️

Other Changes

Full Changelog: v2.11.0...v2.11.1

v2.11.1-rc2

19 Aug 08:13
6b7ecba
Compare
Choose a tag to compare
v2.11.1-rc2 Pre-release
Pre-release

What's Changed

Component updates ⬆️

Other Changes

Full Changelog: v2.11.0...v2.11.1-rc2

v2.11.1-rc1

13 Aug 07:08
b939f60
Compare
Choose a tag to compare
v2.11.1-rc1 Pre-release
Pre-release

What's Changed

Component updates ⬆️

Other Changes

Full Changelog: v2.11.0...v2.11.1-rc1

v2.10.3

04 Jul 05:58
c8c11b4
Compare
Choose a tag to compare

Known issue

  • known issue #20691 LDAP handshake failure with LDAP server having old TLS_RSA_* cipher suites. Workaround: add env variable GODEBUG="tlsrsakex=1" to common/config/core/env file and restart Harbor.

What's Changed

Component updates ⬆️

  • fix: update doublestar lib by @zyyw in #20442
  • [cherry-pick] Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20551
  • fix: upgrade golang to 1.22.4 and bump up dep by @zyyw in #20665

Full Changelog: v2.10.2...v2.10.3