------------------------------------------------------------------- Tue Nov 25 13:29:52 UTC 2025 - Christopher Hofmann - Update to version 2.14.1: * Add non-containerized harbor_container_setup for SUSE Private Registry * bump base photon image for v2.14.1 (#22576) * update go version claim (#22564) * bump base version for v2.14.1 (#22552) * bump base and go for 2.14.1 (#22550) * Revert to older version of trivy adapter (#22541) * chore(deps): bump k8s.io/client-go from 0.33.3 to 0.34.1 in /src (#22515) * chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.3.0 in /src (#22518) * [2.14]:Pin to trivy adapter v0.34.1 (#22512) * bump base images for v2.14.1 (#22506) * bump go version for v2.14.1 (#22499) * Bump up trivy and trivy-adapter for v2.14.1 (#22501) * [cherry-pick]refactor the logic to init skip_audit_log_database (#22496) * [cherry-pick] add migraiton sql for skip_audit_log_database (#22489) * [cherry-pick] Allow disable audit log to DB when initialize (#22469) * (cherry-pick) Add UI for limit upstream registry connection (#22410) * Add max_upstream_conn parameter for each proxy_cache project (#22348) (#22409) * [cherry-pick] fix robot issue-21406 (#22394) * build base for rc2 (#22341) * (cherry-pick) Remove GCR replication because GCR account is removed (#22332) * bump base images for v2.14.0-rc2 (#22334) * (cherry-pick) Remove port 9443 from harbor IP for webhook event check (#22331) * Bump up trivy to 0.66.0 and pin trivy-adapter to 0.34.0 (#22322) * build base for v2.14.0 (#22299) * Remove gitlab replication (#22298) * Adjust the xpath to find the package column in testcase (#22292) * Bump up trivy (#22293) * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src (#22284) * chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src (#22243) * chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src (#22281) * chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src (#22283) * chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src (#22282) * Refine the sql to query non empty repositories (#22269) * Return the Resport when the scanner is unhealthy (#22255) * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src (#22244) * chore(deps): bump actions/checkout from 3 to 5 (#22250) * chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src (#22258) * add prepare migration script for 2.14.0 (#22247) * Upload build logs to github artifact (#22223) * build base images (#22249) * bump base verson for v2.15.0 (#22241) * feat: Single Active Replication (#21347) * bump go version (#22238) * update the support list of proxy cache (#22237) * Delete local cache if the artifact doesn't exist in upstream registry (#22175) * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src (#22225) * remove extra build_base=false && pull_base_from_dockerhub=false check logic (#22233) * The tag retention job failed with 403 error message (#22159) * feat: support raw format for CNAI model (#22040) * Add HTTP 409 error when creating robot account (#22201) * bump golang version (#22205) * update the orm filter func (#22208) * fix: correct the permission of project maintainer role for webhook policy (#22135) * add the replicaiton adapter whitelist (#22198) * Display download url for BUILD_PACKAGE action (#22197) * Don't always skip vuln check when artifact is not scannable (#22187) * Remove testcase Open Image Scanners doc page (#22180) * chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src (#22188) * chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src (#22113) * clean up project metadata for tag retention policy after deletion (#22174) * Set MAX_JOB_DURATION_SECONDS from jobservice config.yml (#22116) * Add status field to the API on secyurityHub (#22182) * chore: Updated RELEASE.md by updating Minor Release Support Map (#22145) * Improve portal README.md formatting and clarity (#22173) * Add "status" of CVEs to artfact scan report (#22177) * Update FixVersion and ScoreV3 (#22007) * Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject (#22165) * Fix: Audit Log Eventtype antipattern in System Settings UI (#22147) * lazy load v2_swagger_client module (#22154) * add BUILD_INSTALLER parameter for optionally build prepare and log container (#22148) * add dockernetwork parameter for build process (#22138) * Add Russian language support (#21083) * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.17 to 1.1.19 in /src (#22133) * feat: support customize the job execution retention count by env (#22129) * Update pipenv for prepare (#22124) * change the pass-CI rules to exclude the resources and robot-cases folder (#22121) * Update CHANGELOG.md, RELEASES.md and ROADMAP.md (#22095) * update robot case for get harbor version (#22104) * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.11 to 1.1.17 in /src (#22089) * Add environment variable add network_type env (#22097) * refactor: simplify some implementations by modern go features (#21998) * Update Swagger 's readme.md (#22087) * fix: CVE Allowlist Validation (#22077) * Update contributing.md (#22082) * chore(deps): bump helm.sh/helm/v3 from 3.17.2 to 3.18.2 in /src (#22060) * Remove document link from Image Scanner (#22064) * Refactor: Simplify SearchAndOnBoardGroup Logic (#22058) * chore: fix the arguments for codecov v5 (#22050) * README.md: add artifact hub badge (#20736) * chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.185 to 1.1.10 in /src (#22035) * chore(deps): bump k8s.io/client-go from 0.32.2 to 0.33.1 in /src (#22011) * feat: add rate limiter for alibaba cloud acr adapter (#21953) * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.84 to 1.63.107 in /src (#21943) * chore(deps): bump aws-actions/configure-aws-credentials from 4.1.0 to 4.2.1 (#22003) * udpate storage to s3 (#21999) * Test update for adding nil value to list (#21990) * increase docker client timeout for robot case (#21994) * bump up golang version to v1.24.3 (#21993) * update robot permission table (#21989) * add build flag for harbor exporter (#21988) * Fix: Helm Chart Copy Button in UI (#21969) * refactor: replace interface{} to any (#21973) * Display gc progress information in running state (#21974) * Add manifestcache push for tag and digest to local repository (#21141) * change python ./setup.py install to pip install . because deprecated (#21952) * Generate URI of token service via Host in request (#21898) * unify the golang image version (#21935) * Update the severity, fixed version and cvss_score_v3 (#21915) * FIX: Display 'No SBOM' in multi-arch images in HarborUI (#21459) * enhance the query judgement (#21924) * Remove the error check never happen (#21916) * Add missing step in e2e pipeline setup (#21888) * revise make file for lint api (#21906) * fix: check blob exist before copying layers samller than chunk size (#21883) * update artifact info (#21902) * update gitaction machine to 22.04 (#21900) * chore: bump golangci-lint to v2 (#21887) * fix jobservice container loglevel consistent with job_log (#21874) * fix: support preheat cnai model artifact (#21849) * Update robot testcase related to security hub row count to 15 by default (#21846) * Update dependencies in Harbor UI (#21823) * bump base version for v2.14 (#21819) ------------------------------------------------------------------- Wed Nov 12 10:44:27 UTC 2025 - Christopher Hofmann - Update to 2.13.3 ------------------------------------------------------------------- Tue Sep 9 13:07:45 UTC 2025 - Will Stephenson - Fix CVEs in helm.sh/helm/v3 (CVE-2025-55198, CVE-2025-55199) ------------------------------------------------------------------- Fri Aug 29 11:25:02 UTC 2025 - Christopher Hofmann - align version string in webUI to SPR version instead of Harbor version ------------------------------------------------------------------- Wed Aug 27 11:38:39 UTC 2025 - Christopher Hofmann - fix version string shown in WebUI ------------------------------------------------------------------- Wed Aug 6 11:36:29 UTC 2025 - Christopher Hofmann - Update to 2.13.2 ------------------------------------------------------------------- Wed Jul 23 17:24:57 UTC 2025 - Christopher Hofmann - New package for 2.13.1