Releases: goharbor/harbor
v1.10.18-rc2
What's Changed
- Bump up photon version to 4.0 on release-1.10.0 by @YangJiao0817 in #18302
- Bump up version to v1.10.18 by @YangJiao0817 in #18577
- [Cherry-pick]Replace python script with node script for portal Dockerfile by @AllForNothing in #18641
Full Changelog: v1.10.17...v1.10.18-rc2
v2.7.2
What's Changed
Component updates ⬆️
- [cherry-pick] fix: fix the invalid jobid for scan data export by @chlins in #18421
- [cherry-pick] fix: escape the event data for slack webhook payload by @chlins in #18437
- [cherry-pick]fix copy artifact issue by @wy65701436 in #18464
- [cherry-pick] fix: correct the retention webhook payload by @chlins in #18467
- bump golang 1.19.8 on release-2.7.0 by @MinerYang in #18496
- [cherry-pick] fix: fix error bitsize of jobservice reaper scan locks by @chlins in #18494
- bump golang.org/x/net v0.9.0 on release-2.7.0 by @MinerYang in #18544
- bump helm.sh/helm/v3 v3.11.3 on release-2.7.0 by @MinerYang in #18548
- feat: update TRIVYVERSION=v0.40.0, TRIVYADAPTERVERSION=v0.30.11 by @zyyw in #18559
- [cherry-pick]allow redis password safe special characters on release-2.7.0 by @MinerYang in #18586
Other Changes
- [Cherry-pick]Add Job Service Dashboard Job Queues testcase by @YangJiao0817 in #18348
- [cherry-pick]Add Job Service Dashboard Schedules testcase by @YangJiao0817 in #18556
- [cherry-pick]Fix setup docker error by @YangJiao0817 in #18585
- Add Job Service Dashboard Workers testcase by @YangJiao0817 in #18582
Full Changelog: v2.7.1...v2.7.2
v2.7.2-rc1
What's Changed
Component updates ⬆️
- [cherry-pick] fix: fix the invalid jobid for scan data export by @chlins in #18421
- [cherry-pick] fix: escape the event data for slack webhook payload by @chlins in #18437
- [cherry-pick]fix copy artifact issue by @wy65701436 in #18464
- [cherry-pick] fix: correct the retention webhook payload by @chlins in #18467
- bump golang 1.19.8 on release-2.7.0 by @MinerYang in #18496
- [cherry-pick] fix: fix error bitsize of jobservice reaper scan locks by @chlins in #18494
- bump golang.org/x/net v0.9.0 on release-2.7.0 by @MinerYang in #18544
- bump helm.sh/helm/v3 v3.11.3 on release-2.7.0 by @MinerYang in #18548
- feat: bump up TRIVYVERSION=v0.39.0, TRIVYADAPTERVERSION=v0.30.10 by @zyyw in #18547
- feat: update TRIVYVERSION=v0.40.0, TRIVYADAPTERVERSION=v0.30.11 by @zyyw in #18559
- [cherry-pick]allow redis password safe special characters on release-2.7.0 by @MinerYang in #18586
Other Changes
- [Cherry-pick]Add Job Service Dashboard Job Queues testcase by @YangJiao0817 in #18348
- [cherry-pick]Add Job Service Dashboard Schedules testcase by @YangJiao0817 in #18556
- [cherry-pick]Fix setup docker error by @YangJiao0817 in #18585
- Add Job Service Dashboard Workers testcase by @YangJiao0817 in #18582
Full Changelog: v2.7.1...v2.7.2-rc1
v1.10.18-rc1
What's Changed
- Bump up photon version to 4.0 on release-1.10.0 by @YangJiao0817 in #18302
- Bump up version to v1.10.18 by @YangJiao0817 in #18577
Full Changelog: v1.10.17...v1.10.18-rc1
v2.8.0
Known issue
- In version v2.8.0-v2.8.2, please refrain from using the EXTERNAL REDIS USERNAME (ACL AUTH) due to issue-18892. So if you care about the registry performance, please follow the FAQ guidance to set up your Redis server that allow you to bypass this limitation, otherwise you could just ignore it.
- There's a known issue #19320 that occurs when running harbor.yml migrate script with the specific
storage_service.redirect.disable
configuration. Impact version would be Harbor v2.8 and v2.9, for example migrate from v2.7.X to v2.8.Y or v2.7.X to v2.9.Z. Please refer to this comment as a workaround.
What's Changed
Exciting New Features 🎉
Supporting OCI Distribution Spec v1.1.0-rc1
- add referrers api by @wy65701436 in #18324
- add middleware for artifact with subject by @wy65701436 in #18369
- add subject artifact repo by @wy65701436 in #18394
Support for sending webhook payloads with CloudEvents format
The webhook functionality has undergone significant improvements, aimed at delivering enhanced management and debugging capabilities. The latest update includes the addition of CloudEvents format support, enabling users easily integrate with other systems and services.
- refactor: refact the webhook API and life process by @chlins in #18255
- Enhance webhook UI by @AllForNothing in #18291
- feat: integrate CloudEvents to webhook by @chlins in #18322
Jobservice Dashboard Phase 2
Displaying logs for running tasks, which provides users with real-time visibility into the progress and status of their running jobs.
Cleanup expired running executions, which helps users to automatically cleaning unfinished or expired executions.
- Get job log by job_id in worker by @stonezdj in #18261
- Fix dangling state execution by @stonezdj in #18272
Option to Skip Update Pull Time for Scanner
Allows users to skip the automatic update on pull time that performed by a scanner during a scan task
- Add scanner_skip_update_pulltime property for system setting by @AllForNothing in #18214
- Skip to update pull time and pull count for scanner robot account by @stonezdj in #17807
Additional Features
- Allow the Identity Provider to be the primary auth method in Harbor. by @tpoxa in #17627
- Add logs column for worker datagrid by @AllForNothing in #18307
- Add dynamic column support by @AllForNothing in #18331
- bump up golang to 1.19.4 for main by @MinerYang in #17997
- feat: update TRIVYVERSION=v0.38.2 & TRIVYADAPTERVERSION=v0.30.9 by @zyyw in #18473
- refactor: refresh the execution status in async mode by @chlins in #18434
Deprecations ❌
Removal of ChartMuseum
Starting with version v2.8.0, Harbor no longer includes ChartMuseum in either the user interface or the backend.
- Remove helm chart UI by @AllForNothing in #18099
- remove chartmuseum backend by @wy65701436 in #18191
- Remove chart api by @AllForNothing in #18265
- Update the replication rule related to the Chartmuseum by @YangJiao0817 in #18274
- Migrate robot account and notification policy related to Chartmuseum by @YangJiao0817 in #18316
Note: Please perform the migration before upgrading, if required.
How to migrate helm charts to oci artifacts?
Please navigate to this page for details about the migration.
Enhancement 🚀
- Update datePicker component by @AllForNothing in #18070
- Add i18n support for Clarity components by @AllForNothing in #18076
- aws auth use default creds when none are supplied by @caleblloyd in #17932
- Translate English to Chinese for primary auth mode tooltip by @AllForNothing in #18196
- Display error message by defaul for event panel by @AllForNothing in #18226
- Add next scheduled time for tag retention by @AllForNothing in #18223
- Sort user and usergroup by most match order by @stonezdj in #18273
- Support vpc and internal network (goharbor#17488) by @szyhf in #17489
- Improve Portal french translation by @thcdrt in #18289
- Support accessory recursion for artifact list by @AllForNothing in #18366
- Make label filter editable for replication rule by @AllForNothing in #18357
- Add copy digest button for accessories by @AllForNothing in #18433
- Add new app level warning message by @AllForNothing in #18449
- Update styles for UI according to the designer's suggestions by @AllForNothing in #18463
Component updates ⬆️
- fix: upgrade TRIVYADAPTERVERSION to v0.30.5 by @zyyw in #18002
- bump up golang.org/x/net to v0.2.0 by @MinerYang in #17910
- controller/robot: use global regexp vars by @Iceber in #17915
- fix dragonfly response when p2p preheat by @mr-002 in #15916
- fix the setting of data slice length for tablewriter by @Iceber in #17918
- remove artifact_blob with aritfact deletion by @wy65701436 in #17913
- Update the log information in proxy cache by @stonezdj in #17936
- Avoid internal error in the UI when reset a schedule by @stonezdj in #17946
- Fix some UI issues by @AllForNothing in #17964
- remove the redundant data from table artifact_blob by @wy65701436 in #17937
- fix: upgrade trivy version to v0.35.0 and trivy-adapter version to v0.30.3 by @zyyw in #17976
- fix: Don't supress redis error messages to make debugging easier by @czenker in #17986
- i18n: fix password+secret limit tooltips by @0xC0ncord in #17916
- Switch listUsers to searchUsers for adding project member by @AllForNothing in #18022
- bump up helm/v3/pkg to v3.10.3 on main by @MinerYang in #18050
- Upgrade Angular and Clarity to the latest version by @AllForNothing in #18059
- Bump up TRIVYADAPTERVERSION to v0.30.6 by @zyyw in #18052
- Fix a typo in make/photo/Makefile by @ctrlaltdel in #18111
- fix: remove the scan exports volume by @chlins in #18107
- fix retention/immutable API issue by @zyyw in #18158
- Bump google-github-actions/auth from 0 to 1 by @dependabot in #17771
- Correct total count for schedule list datagrid by @AllForNothing in #18148
- Support searching artifacts by specified tag name by @AllForNothing in #18175
- fix: reset user password by @zyyw in #18192
- fix: update the replication API handler by @chlins in #18197
- feat: bump-up trivyVersion to v0.37.2, trivyAdapterVersion to v0.30.7 by @zyyw in #18217
- fix: add "next_scheduled_time" by @zyyw in #18102
- fix: resolve the oidc or ldap group user cannot export cve by @chlins in #18219
- Change queue name for purge audit log and filter the old one by @stonezdj in #18182
- Improve swagger descriptions (without changing security settings) by @okin in #18205
- Add retry times for calling CVE data export execution list API by @AllForNothing in #18297
- Update UI for the deprecation of Artifact Hub by @AllForNothing in #18303
- Modified to check the expiration time of the allowlist when determining the vulnerability of an artifact by @hyeyoung-leee in #18106
- Update robot account ...
v2.8.0-rc2
Known issue
- In version v2.8.0-v2.8.2, please refrain from using the EXTERNAL REDIS USERNAME (ACL AUTH) due to issue-18892. So if you care about the registry performance, please follow the FAQ guidance to set up your Redis server that allow you to bypass this limitation, otherwise you could just ignore it.
- There's a known issue #19320 that occurs when running harbor.yml migrate script with the specific
storage_service.redirect.disable
configuration. Impact version would be Harbor v2.8 and v2.9, for example migrate from v2.7.X to v2.8.Y or v2.7.X to v2.9.Z. Please refer to this comment as a workaround.
What's Changed
Exciting New Features 🎉
Supporting OCI Distribution Spec v1.1.0-rc1
- add referrers api by @wy65701436 in #18324
- add middleware for artifact with subject by @wy65701436 in #18369
- add subject artifact repo by @wy65701436 in #18394
Support for sending webhook payloads with CloudEvents format
The webhook functionality has undergone significant improvements, aimed at delivering enhanced management and debugging capabilities. The latest update includes the addition of CloudEvents format support, enabling users easily integrate with other systems and services.
- refactor: refact the webhook API and life process by @chlins in #18255
- Enhance webhook UI by @AllForNothing in #18291
- feat: integrate CloudEvents to webhook by @chlins in #18322
Jobservice Dashboard Phase 2
Displaying logs for running tasks, which provides users with real-time visibility into the progress and status of their running jobs.
Cleanup expired running executions, which helps users to automatically cleaning unfinished or expired executions.
- Get job log by job_id in worker by @stonezdj in #18261
- Fix dangling state execution by @stonezdj in #18272
Option to Skip Update Pull Time for Scanner
Allows users to skip the automatic update on pull time that performed by a scanner during a scan task
- Add scanner_skip_update_pulltime property for system setting by @AllForNothing in #18214
- Skip to update pull time and pull count for scanner robot account by @stonezdj in #17807
Additional Features
- Allow the Identity Provider to be the primary auth method in Harbor. by @tpoxa in #17627
- Add logs column for worker datagrid by @AllForNothing in #18307
- Add dynamic column support by @AllForNothing in #18331
- bump up golang to 1.19.4 for main by @MinerYang in #17997
- feat: update TRIVYVERSION=v0.38.2 & TRIVYADAPTERVERSION=v0.30.9 by @zyyw in #18473
- refactor: refresh the execution status in async mode by @chlins in #18434
Deprecations ❌
Removal of ChartMuseum
Starting with version v2.8.0, Harbor no longer includes ChartMuseum in either the user interface or the backend.
- Remove helm chart UI by @AllForNothing in #18099
- remove chartmuseum backend by @wy65701436 in #18191
- Remove chart api by @AllForNothing in #18265
- Update the replication rule related to the Chartmuseum by @YangJiao0817 in #18274
- Migrate robot account and notification policy related to Chartmuseum by @YangJiao0817 in #18316
Enhancement 🚀
- Update datePicker component by @AllForNothing in #18070
- Add i18n support for Clarity components by @AllForNothing in #18076
- aws auth use default creds when none are supplied by @caleblloyd in #17932
- Translate English to Chinese for primary auth mode tooltip by @AllForNothing in #18196
- Display error message by defaul for event panel by @AllForNothing in #18226
- Add next scheduled time for tag retention by @AllForNothing in #18223
- Sort user and usergroup by most match order by @stonezdj in #18273
- Support vpc and internal network (goharbor#17488) by @szyhf in #17489
- Improve Portal french translation by @thcdrt in #18289
- Support accessory recursion for artifact list by @AllForNothing in #18366
- Make label filter editable for replication rule by @AllForNothing in #18357
- Add copy digest button for accessories by @AllForNothing in #18433
- Add new app level warning message by @AllForNothing in #18449
- Update styles for UI according to the designer's suggestions by @AllForNothing in #18463
Component updates ⬆️
- fix: upgrade TRIVYADAPTERVERSION to v0.30.5 by @zyyw in #18002
- bump up golang.org/x/net to v0.2.0 by @MinerYang in #17910
- controller/robot: use global regexp vars by @Iceber in #17915
- fix dragonfly response when p2p preheat by @mr-002 in #15916
- fix the setting of data slice length for tablewriter by @Iceber in #17918
- remove artifact_blob with aritfact deletion by @wy65701436 in #17913
- Update the log information in proxy cache by @stonezdj in #17936
- Avoid internal error in the UI when reset a schedule by @stonezdj in #17946
- Fix some UI issues by @AllForNothing in #17964
- remove the redundant data from table artifact_blob by @wy65701436 in #17937
- fix: upgrade trivy version to v0.35.0 and trivy-adapter version to v0.30.3 by @zyyw in #17976
- fix: Don't supress redis error messages to make debugging easier by @czenker in #17986
- i18n: fix password+secret limit tooltips by @0xC0ncord in #17916
- Switch listUsers to searchUsers for adding project member by @AllForNothing in #18022
- bump up helm/v3/pkg to v3.10.3 on main by @MinerYang in #18050
- Upgrade Angular and Clarity to the latest version by @AllForNothing in #18059
- Bump up TRIVYADAPTERVERSION to v0.30.6 by @zyyw in #18052
- Fix a typo in make/photo/Makefile by @ctrlaltdel in #18111
- fix: remove the scan exports volume by @chlins in #18107
- fix retention/immutable API issue by @zyyw in #18158
- Bump google-github-actions/auth from 0 to 1 by @dependabot in #17771
- Correct total count for schedule list datagrid by @AllForNothing in #18148
- Support searching artifacts by specified tag name by @AllForNothing in #18175
- fix: reset user password by @zyyw in #18192
- fix: update the replication API handler by @chlins in #18197
- feat: bump-up trivyVersion to v0.37.2, trivyAdapterVersion to v0.30.7 by @zyyw in #18217
- fix: add "next_scheduled_time" by @zyyw in #18102
- fix: resolve the oidc or ldap group user cannot export cve by @chlins in #18219
- Change queue name for purge audit log and filter the old one by @stonezdj in #18182
- Improve swagger descriptions (without changing security settings) by @okin in #18205
- Add retry times for calling CVE data export execution list API by @AllForNothing in #18297
- Update UI for the deprecation of Artifact Hub by @AllForNothing in #18303
- Modified to check the expiration time of the allowlist when determining the vulnerability of an artifact by @hyeyoung-leee in #18106
- Update robot account to skip NotFoundErr by @YangJiao0817 in #18321
- replace subject id with digest by @wy65701436 in #18278
- fix robot account list project by @wy65701436 in #183...
v2.8.0-rc1
Known issue
- In version v2.8.0-v2.8.2, please refrain from using the EXTERNAL REDIS USERNAME (ACL AUTH) due to issue-18892. So if you care about the registry performance, please follow the FAQ guidance to set up your Redis server that allow you to bypass this limitation, otherwise you could just ignore it.
- There's a known issue #19320 that occurs when running harbor.yml migrate script with the specific
storage_service.redirect.disable
configuration. Impact version would be Harbor v2.8 and v2.9, for example migrate from v2.7.X to v2.8.Y or v2.7.X to v2.9.Z. Please refer to this comment as a workaround.
What's Changed
Exciting New Features 🎉
Supporting OCI Distribution Spec v1.1.0-rc1
- add referrers api by @wy65701436 in #18324
- add middleware for artifact with subject by @wy65701436 in #18369
- add subject artifact repo by @wy65701436 in #18394
Support for sending webhook payloads with CloudEvents format
The webhook functionality has undergone significant improvements, aimed at delivering enhanced management and debugging capabilities. The latest update includes the addition of CloudEvents format support, enabling users easily integrate with other systems and services.
- refactor: refact the webhook API and life process by @chlins in #18255
- Enhance webhook UI by @AllForNothing in #18291
- feat: integrate CloudEvents to webhook by @chlins in #18322
Jobservice Dashboard Phase 2
Displaying logs for running tasks, which provides users with real-time visibility into the progress and status of their running jobs.
Cleanup expired running executions, which helps users to automatically cleaning unfinished or expired executions.
- Get job log by job_id in worker by @stonezdj in #18261
- Fix dangling state execution by @stonezdj in #18272
Option to Skip Update Pull Time for Scanner
Allows users to skip the automatic update on pull time that performed by a scanner during a scan task
- Add scanner_skip_update_pulltime property for system setting by @AllForNothing in #18214
- Skip to update pull time and pull count for scanner robot account by @stonezdj in #17807
Additional Features
- Allow the Identity Provider to be the primary auth method in Harbor. by @tpoxa in #17627
- Add logs column for worker datagrid by @AllForNothing in #18307
- Add dynamic column support by @AllForNothing in #18331
- bump up golang to 1.19.4 for main by @MinerYang in #17997
- feat: update TRIVYVERSION=v0.38.2 & TRIVYADAPTERVERSION=v0.30.9 by @zyyw in #18473
- refactor: refresh the execution status in async mode by @chlins in #18434
Deprecations ❌
Removal of ChartMuseum
Starting with version v2.8.0, Harbor no longer includes ChartMuseum in either the user interface or the backend.
- Remove helm chart UI by @AllForNothing in #18099
- remove chartmuseum backend by @wy65701436 in #18191
- Remove chart api by @AllForNothing in #18265
- Update the replication rule related to the Chartmuseum by @YangJiao0817 in #18274
- Migrate robot account and notification policy related to Chartmuseum by @YangJiao0817 in #18316
Enhancement 🚀
- Update datePicker component by @AllForNothing in #18070
- Add i18n support for Clarity components by @AllForNothing in #18076
- aws auth use default creds when none are supplied by @caleblloyd in #17932
- Translate English to Chinese for primary auth mode tooltip by @AllForNothing in #18196
- Display error message by defaul for event panel by @AllForNothing in #18226
- Add next scheduled time for tag retention by @AllForNothing in #18223
- Sort user and usergroup by most match order by @stonezdj in #18273
- Support vpc and internal network (goharbor#17488) by @szyhf in #17489
- Improve Portal french translation by @thcdrt in #18289
- Support accessory recursion for artifact list by @AllForNothing in #18366
- Make label filter editable for replication rule by @AllForNothing in #18357
- Add copy digest button for accessories by @AllForNothing in #18433
- Add new app level warning message by @AllForNothing in #18449
- Update styles for UI according to the designer's suggestions by @AllForNothing in #18463
Component updates ⬆️
- fix: upgrade TRIVYADAPTERVERSION to v0.30.5 by @zyyw in #18002
- bump up golang.org/x/net to v0.2.0 by @MinerYang in #17910
- controller/robot: use global regexp vars by @Iceber in #17915
- fix dragonfly response when p2p preheat by @mr-002 in #15916
- fix the setting of data slice length for tablewriter by @Iceber in #17918
- remove artifact_blob with aritfact deletion by @wy65701436 in #17913
- Update the log information in proxy cache by @stonezdj in #17936
- Avoid internal error in the UI when reset a schedule by @stonezdj in #17946
- Fix some UI issues by @AllForNothing in #17964
- remove the redundant data from table artifact_blob by @wy65701436 in #17937
- fix: upgrade trivy version to v0.35.0 and trivy-adapter version to v0.30.3 by @zyyw in #17976
- fix: Don't supress redis error messages to make debugging easier by @czenker in #17986
- i18n: fix password+secret limit tooltips by @0xC0ncord in #17916
- Switch listUsers to searchUsers for adding project member by @AllForNothing in #18022
- bump up helm/v3/pkg to v3.10.3 on main by @MinerYang in #18050
- Upgrade Angular and Clarity to the latest version by @AllForNothing in #18059
- Bump up TRIVYADAPTERVERSION to v0.30.6 by @zyyw in #18052
- Fix a typo in make/photo/Makefile by @ctrlaltdel in #18111
- fix: remove the scan exports volume by @chlins in #18107
- fix retention/immutable API issue by @zyyw in #18158
- Bump google-github-actions/auth from 0 to 1 by @dependabot in #17771
- Correct total count for schedule list datagrid by @AllForNothing in #18148
- Support searching artifacts by specified tag name by @AllForNothing in #18175
- fix: reset user password by @zyyw in #18192
- fix: update the replication API handler by @chlins in #18197
- feat: bump-up trivyVersion to v0.37.2, trivyAdapterVersion to v0.30.7 by @zyyw in #18217
- fix: add "next_scheduled_time" by @zyyw in #18102
- fix: resolve the oidc or ldap group user cannot export cve by @chlins in #18219
- Change queue name for purge audit log and filter the old one by @stonezdj in #18182
- Improve swagger descriptions (without changing security settings) by @okin in #18205
- Add retry times for calling CVE data export execution list API by @AllForNothing in #18297
- Update UI for the deprecation of Artifact Hub by @AllForNothing in #18303
- Modified to check the expiration time of the allowlist when determining the vulnerability of an artifact by @hyeyoung-leee in #18106
- Update robot account to skip NotFoundErr by @YangJiao0817 in #18321
- replace subject id with digest by @wy65701436 in #18278
- fix robot account list project by @wy65701436 in #183...
v1.10.17
What's Changed
- Bump up version to v1.10.17 by @YangJiao0817 in #18285
Full Changelog: v1.10.16...v1.10.17
v1.10.17-rc1
What's Changed
- Bump up version to v1.10.17 by @YangJiao0817 in #18285
Full Changelog: v1.10.16...v1.10.17-rc1
v2.5.6
What's Changed
Component updates ⬆️
- [Cherry-pick]Update CI for UI UT by @AllForNothing in #18167
- [Cherry-pick] fix retention/immutable API issue (#18158) by @zyyw in #18190
- [Cherry-pick] fix: reset user password by @zyyw in #18208
- [cherry-pick] fix: update the replication API handler by @chlins in #18211
- feat: bump-up trivyVersion to v0.37.2, trivyAdapterVersion to v0.30.7 (#18217) by @zyyw in #18222
Other Changes
- [cherry-pick]Fix Setup Docker error in CI by @YangJiao0817 in #18240
- [cherry-pick]Update DB Dockerfile.base by @YangJiao0817 in #18248
Full Changelog: v2.5.5...v2.5.6