v2.12.0-rc2

What's Changed

Exciting New Features 🎉

• feat: implement bandwidth limit for proxy-cache by @zyyw in #20812
• enable audit log for robot by @wy65701436 in #20843
• add creator for robot by @wy65701436 in #20846
• enable robot full access by @wy65701436 in #20754
• Feat: add acr ee support by @njucjc in #19658

Enhancement 🚀

• add list project arifacts API by @wy65701436 in #20803
• Parallel attach ldap group by @stonezdj in #20705
• Feature export Harbor statistics as Prometheus metric by @tpoxa in #18679
• Refactor: p2p preheat dragonfly driver by @chlins in #20922
• Make it possible to build the spectral image also on ARM by @Vad1mo in #20506
• UI Changes for Configuring Proxy-Cache Speed Limit by @kunal-511 in #20946

Component updates ⬆️

• Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in #20450
• Fix - 20469 sbom status and download issue by @xuelichao in #20471
• chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in #20455
• chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in #20451
• chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in #20453
• Add sbom_report table to store sbom related information by @stonezdj in #20473
• Separate the execution vendor type sbom from image_scan by @stonezdj in #20504
• Fix multiple SBOM by @wy65701436 in #20503
• Fix tooltip issue related to SBOM.Details by @stonezdj in #20510
• tls support for pushing sbom by @wy65701436 in #20514
• fix 20518 by @wy65701436 in #20521
• fix http client to push sbom accessory by @wy65701436 in #20525
• Response an error message when there is incomplete sbom generate job by @stonezdj in #20526
• No sbom_overview when sbom is deleted by @stonezdj in #20533
• Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in #20538
• chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in #20487
• chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in #20542
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in #20541
• chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in #20488
• Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20545
• Use internal registry url to push artifact accessory by @stonezdj in #20575
• Remove the delete local manifest when remote doesn't exist by @stonezdj in #20597
• fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in #20603
• fix: reduce the execution sweep job frequency from hourly to daily by @chlins in #20601
• Add menu item for ko_KR local by @stonezdj in #20602
• fix: hide the scan related button when installation without scanner by @chlins in #20616
• chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in #20567
• chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in #20609
• Add translation for zh_CN by @stonezdj in #20617
• fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20652
• Add SBOM translation for fr_FR by @flbla in #20625
• bump up beego to v2.2.1 by @MinerYang in #20555
• fix: correct the API data for the dependencies of the helm chart by @chlins in #20676
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in #20653
• chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in #20655
• chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in #20656
• JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in #20684
• Change the log message when PostScan failed. by @stonezdj in #20650
• feat: bump mockery and switch to generate by config file by @chlins in #20742
• chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in #20713
• chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in #20715
• make distribution_src configurable by @MinerYang in #20769
• chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in #20716
• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in #20721
• refactor: unify the mock file generation by @chlins in #20765
• Extend AWS ECR regex for c2s support by @ethanchowell in #20648
• remove migrate-patch by @kariya-mitsuru in #20619
• Check create when fire the artifact event by @stonezdj in #20832
• fix: fix the GC job index data race by @chlins in #20830
• fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in #20858
• fix: migrate cicd to registry goharbor by @zyyw in #20872
• Fixed the ui bug of banner coming over the search result container by @kunal-511 in #20871
• refactor: remove useless error check for scan data export job by @chlins in #20883
• Escape the - with - when it is a char of itself by @stonezdj in #20892
• chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in #20878
• chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in #20783
• chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in #20888
• chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in #20879
• chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in #20785
• chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in #20784
• update robot creator database scheme by @wy65701436 in #20918
• Update fr-fr-lang.json by @tostt in #20942
• fix: p2p instance test connection by @chlins in #20968
• update golang version by @wy65701436 in #21014
• add prepare migration script for 2.12.0 by @MinerYang in #21022
• chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in #21008
• chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in #20983
• feat: support Alibaba ACR proxy cache type by @njucjc in #19692
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in #20984
• remove the robot update permission by @wy65701436 in #21028
• Change the log level from warning to debug to avoid noise when there … by @stonezdj in https://github.com/goharbor/harbor/pull/...

v2.12.0-rc1

What's Changed

Exciting New Features 🎉

• feat: implement bandwidth limit for proxy-cache by @zyyw in #20812
• enable audit log for robot by @wy65701436 in #20843
• add creator for robot by @wy65701436 in #20846
• enable robot full access by @wy65701436 in #20754
• Feat: add acr ee support by @njucjc in #19658

Enhancement 🚀

• add list project arifacts API by @wy65701436 in #20803
• Parallel attach ldap group by @stonezdj in #20705
• Feature export Harbor statistics as Prometheus metric by @tpoxa in #18679
• Refactor: p2p preheat dragonfly driver by @chlins in #20922
• Make it possible to build the spectral image also on ARM by @Vad1mo in #20506
• UI Changes for Configuring Proxy-Cache Speed Limit by @kunal-511 in #20946

Component updates ⬆️

• Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in #20450
• Fix - 20469 sbom status and download issue by @xuelichao in #20471
• chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in #20455
• chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in #20451
• chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in #20453
• Add sbom_report table to store sbom related information by @stonezdj in #20473
• Separate the execution vendor type sbom from image_scan by @stonezdj in #20504
• Fix multiple SBOM by @wy65701436 in #20503
• Fix tooltip issue related to SBOM.Details by @stonezdj in #20510
• tls support for pushing sbom by @wy65701436 in #20514
• fix 20518 by @wy65701436 in #20521
• fix http client to push sbom accessory by @wy65701436 in #20525
• Response an error message when there is incomplete sbom generate job by @stonezdj in #20526
• No sbom_overview when sbom is deleted by @stonezdj in #20533
• Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in #20538
• chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in #20487
• chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in #20542
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in #20541
• chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in #20488
• Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20545
• Use internal registry url to push artifact accessory by @stonezdj in #20575
• Remove the delete local manifest when remote doesn't exist by @stonezdj in #20597
• fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in #20603
• fix: reduce the execution sweep job frequency from hourly to daily by @chlins in #20601
• Add menu item for ko_KR local by @stonezdj in #20602
• fix: hide the scan related button when installation without scanner by @chlins in #20616
• chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in #20567
• chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in #20609
• Add translation for zh_CN by @stonezdj in #20617
• fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20652
• Add SBOM translation for fr_FR by @flbla in #20625
• bump up beego to v2.2.1 by @MinerYang in #20555
• fix: correct the API data for the dependencies of the helm chart by @chlins in #20676
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in #20653
• chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in #20655
• chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in #20656
• JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in #20684
• Change the log message when PostScan failed. by @stonezdj in #20650
• feat: bump mockery and switch to generate by config file by @chlins in #20742
• chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in #20713
• chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in #20715
• make distribution_src configurable by @MinerYang in #20769
• chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in #20716
• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in #20721
• refactor: unify the mock file generation by @chlins in #20765
• Extend AWS ECR regex for c2s support by @ethanchowell in #20648
• remove migrate-patch by @kariya-mitsuru in #20619
• Check create when fire the artifact event by @stonezdj in #20832
• fix: fix the GC job index data race by @chlins in #20830
• fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in #20858
• fix: migrate cicd to registry goharbor by @zyyw in #20872
• Fixed the ui bug of banner coming over the search result container by @kunal-511 in #20871
• refactor: remove useless error check for scan data export job by @chlins in #20883
• Escape the - with - when it is a char of itself by @stonezdj in #20892
• chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in #20878
• chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in #20783
• chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in #20888
• chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in #20879
• chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in #20785
• chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in #20784
• update robot creator database scheme by @wy65701436 in #20918
• Update fr-fr-lang.json by @tostt in #20942
• fix: p2p instance test connection by @chlins in #20968
• update golang version by @wy65701436 in #21014
• add prepare migration script for 2.12.0 by @MinerYang in #21022
• chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in #21008
• chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in #20983
• feat: support Alibaba ACR proxy cache type by @njucjc in #19692
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in #20984
• remove the robot update permission by @wy65701436 in #21028
• Change the log level from warning to deb...

v1.10.19

What's Changed

• bump go1.20.7 on release-1.10.0 base on ph4 by @MinerYang in #19206
• bump up version to 1.10.19 by @zyyw in #20698
• Update ".buildbaselog" to trigger refresh of base image by @reasonerjt in #20900
• Install docker-compose in build-package action by @reasonerjt in #20905
• update the version of docker-compose to be installed in "build-package" by @reasonerjt in #20907
• bump up the pacakges in base image by @reasonerjt in #20916

Full Changelog: v1.10.18...v1.10.19

v1.10.19-rc1

What's Changed

• bump go1.20.7 on release-1.10.0 base on ph4 by @MinerYang in #19206
• bump up version to 1.10.19 by @zyyw in #20698

Full Changelog: v1.10.18...v1.10.19-rc1

v2.11.1

What's Changed

Component updates ⬆️

• [cherry-pick] Use internal registry url to push artifact accessory by @stonezdj in #20581
• [cherry-pick] Add menu item for ko_KR local by @stonezdj in #20633
• [cherry-pick] Add translation for zh_CN by @stonezdj in #20634
• [cherry-pick] fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20661
• [cherry-pick] Change the log message when PostScan failed. by @stonezdj in #20699
• [cherry-pick ]Release 2.11.0 cp 20803 by @wy65701436 in #20814
• cherry-pick #20603 by @wy65701436 in #20824
• remove migrate patch by @wy65701436 in #20834
• [cherry-pick] Check create when fire the artifact event by @stonezdj in #20838
• fix: bump up golang to v1.22.6 by @zyyw in #20839
• fix: bump trivy-adapter version to v0.31.4 and trivy version to v0.54.1; by @zyyw in #20854

Other Changes

• fix: update migrate tc by @zyyw in #20678

Full Changelog: v2.11.0...v2.11.1

v2.11.1-rc2

What's Changed

Component updates ⬆️

• [cherry-pick] Use internal registry url to push artifact accessory by @stonezdj in #20581
• [cherry-pick] Add menu item for ko_KR local by @stonezdj in #20633
• [cherry-pick] Add translation for zh_CN by @stonezdj in #20634
• [cherry-pick] fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20661
• [cherry-pick] Change the log message when PostScan failed. by @stonezdj in #20699
• [cherry-pick ]Release 2.11.0 cp 20803 by @wy65701436 in #20814
• cherry-pick #20603 by @wy65701436 in #20824
• remove migrate patch by @wy65701436 in #20834
• [cherry-pick] Check create when fire the artifact event by @stonezdj in #20838
• fix: bump up golang to v1.22.6 by @zyyw in #20839
• fix: bump trivy-adapter version to v0.31.4 and trivy version to v0.54.1; by @zyyw in #20854

Other Changes

• fix: update migrate tc by @zyyw in #20678

Full Changelog: v2.11.0...v2.11.1-rc2

v2.11.1-rc1

What's Changed

Component updates ⬆️

• [cherry-pick] Use internal registry url to push artifact accessory by @stonezdj in #20581
• [cherry-pick] Add menu item for ko_KR local by @stonezdj in #20633
• [cherry-pick] Add translation for zh_CN by @stonezdj in #20634
• [cherry-pick] fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20661
• [cherry-pick] Change the log message when PostScan failed. by @stonezdj in #20699
• [cherry-pick ]Release 2.11.0 cp 20803 by @wy65701436 in #20814
• cherry-pick #20603 by @wy65701436 in #20824
• remove migrate patch by @wy65701436 in #20834
• [cherry-pick] Check create when fire the artifact event by @stonezdj in #20838
• fix: bump up golang to v1.22.6 by @zyyw in #20839

Other Changes

• fix: update migrate tc by @zyyw in #20678

Full Changelog: v2.11.0...v2.11.1-rc1

v2.10.3

Known issue

• known issue #20691 LDAP handshake failure with LDAP server having old TLS_RSA_* cipher suites. Workaround: add env variable GODEBUG="tlsrsakex=1" to common/config/core/env file and restart Harbor.

What's Changed

Component updates ⬆️

• fix: update doublestar lib by @zyyw in #20442
• [cherry-pick] Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20551
• fix: upgrade golang to 1.22.4 and bump up dep by @zyyw in #20665

Full Changelog: v2.10.2...v2.10.3

v2.10.3-rc1

What's Changed

Component updates ⬆️

• fix: update doublestar lib by @zyyw in #20442
• [cherry-pick] Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20551
• fix: upgrade golang to 1.22.4 and bump up dep by @zyyw in #20665

Full Changelog: v2.10.2...v2.10.3-rc1

v2.9.5

Known issue

• known issue #20691 LDAP handshake failure with LDAP server having old TLS_RSA_* cipher suites. Workaround: add env variable GODEBUG="tlsrsakex=1" to common/config/core/env file and restart Harbor.

What's Changed

Component updates ⬆️

• fix: update doublestar dep by @zyyw in #20443
• [cherry-pick] Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20552
• upgrade golang to 1.22.4 and bump up dep by @zyyw in #20662

Other Changes

• fix: update migrate tc by @zyyw in #20677

Full Changelog: v2.9.4...v2.9.5