v2.12.0
What's Changed
Exciting New Features 🎉
Enhanced robot account 🎉
The enhancements to the robot account functionality in Harbor v2.12.0, aimed at improving access control and automation in CI/CD processes. Key changes include additional configuration options for better integration and security management. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/Robot-Account-Expand.md
Speed limit of proxy cache project 🎉
Harbor now supports to set the speed limit for the proxy cache projects. After Harbor v2.12.0, the user is able to simple control network speed when pulling artifacts from proxy cache projects.
Enhanced LDAP on-boarding process
In v2.12.0, Harbor enhances the LDAP onboarding process to improve user login performance. This revision addresses previous performance issues, ensuring a smoother authentication experience.
Integration with ACR & ACR EE Registry
Users can now seamlessly replicate images to and from the ACR & ACR EE registry, enhancing interoperability and flexibility within the Harbor ecosystem.
- feat: implement bandwidth limit for proxy-cache by @zyyw in #20812
- enable audit log for robot by @wy65701436 in #20843
- add creator for robot by @wy65701436 in #20846
- enable robot full access by @wy65701436 in #20754
- Feat: add acr ee support by @njucjc in #19658
- Parallel attach ldap group by @stonezdj in #20705
- UI Changes for Configuring Proxy-Cache Speed Limit by @kunal-511 in #20946
Enhancement 🚀
- add list project arifacts API by @wy65701436 in #20803
- Feature export Harbor statistics as Prometheus metric by @tpoxa in #18679
- Refactor: p2p preheat dragonfly driver by @chlins in #20922
- Make it possible to build the spectral image also on ARM by @Vad1mo in #20506
Component updates ⬆️
- Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in #20450
- Fix - 20469 sbom status and download issue by @xuelichao in #20471
- chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in #20455
- chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in #20451
- chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in #20453
- Add sbom_report table to store sbom related information by @stonezdj in #20473
- Separate the execution vendor type sbom from image_scan by @stonezdj in #20504
- Fix multiple SBOM by @wy65701436 in #20503
- Fix tooltip issue related to SBOM.Details by @stonezdj in #20510
- tls support for pushing sbom by @wy65701436 in #20514
- fix 20518 by @wy65701436 in #20521
- fix http client to push sbom accessory by @wy65701436 in #20525
- Response an error message when there is incomplete sbom generate job by @stonezdj in #20526
- No sbom_overview when sbom is deleted by @stonezdj in #20533
- Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in #20538
- chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in #20487
- chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in #20542
- chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in #20541
- chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in #20488
- Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in #20545
- Use internal registry url to push artifact accessory by @stonezdj in #20575
- Remove the delete local manifest when remote doesn't exist by @stonezdj in #20597
- fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in #20603
- fix: reduce the execution sweep job frequency from hourly to daily by @chlins in #20601
- Add menu item for ko_KR local by @stonezdj in #20602
- fix: hide the scan related button when installation without scanner by @chlins in #20616
- chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in #20567
- chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in #20609
- Add translation for zh_CN by @stonezdj in #20617
- fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in #20652
- Add SBOM translation for fr_FR by @flbla in #20625
- bump up beego to v2.2.1 by @MinerYang in #20555
- fix: correct the API data for the dependencies of the helm chart by @chlins in #20676
- chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in #20653
- chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in #20655
- chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in #20656
- JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in #20684
- Change the log message when PostScan failed. by @stonezdj in #20650
- feat: bump mockery and switch to generate by config file by @chlins in #20742
- chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in #20713
- chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in #20715
- make distribution_src configurable by @MinerYang in #20769
- chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in #20716
- chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in #20721
- refactor: unify the mock file generation by @chlins in #20765
- Extend AWS ECR regex for c2s support by @ethanchowell in #20648
- remove migrate-patch by @kariya-mitsuru in #20619
- Check create when fire the artifact event by @stonezdj in #20832
- fix: fix the GC job index data race by @chlins in #20830
- fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in #20858
- fix: migrate cicd to registry goharbor by @zyyw in #20872
- Fixed the ui bug of banner coming over the search result container by @kunal-511 in #20871
- refactor: remove useless error check for scan data export job by @chlins in #20883
- Escape the - with - when it is a char of itself by @stonezdj in #20892
- chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in #20878
- chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in #20783
- chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in #20888
- chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in #20879
- chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in #20785
- chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in #20784
- update robot creator database scheme by @wy65701436 in #20918
- Update fr-fr-lang.json by @tostt in #20942
- fix: p2p instance test connection by @chlins in #20968
- update golang version by @wy65701436 in #21014
- add prepare migration script for 2.12.0 by @MinerYang in #21022
- chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in #21008
- chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in #20983
- feat: support Alibaba ACR proxy cache type by @njucjc in #19692
- chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in #20984
- remove the robot update permission by @wy65701436 in #21028
- Change the log level from warning to debug to avoid noise when there … by @stonezdj in #21034
- fix: nil pointer dereference when failed to scan out the quota records from redis by @microyahoo in #21046
- Change the base directory of prepare container in macOS by @stonezdj in #21035
- Change setHealth to setUnHealth to avoid misunderstanding by @stonezdj in #21047
- Fix Default Horizontal Scrollbar in Replication Page by @bupd in #21033
- refresh base image by @wy65701436 in #21084
- add pagesize for replicaiton by @wy65701436 in #21081
- temporary disable gpg sign by @wy65701436 in #21085
- fix build package issue by @wy65701436 in #21090
- [cherry-pick] Update fr-fr-lang.json (#21082) by @wy65701436 in #21097
- refresh base by @wy65701436 in #21126
Docs update 🗄️
- doc: update minor release support matrix with v2.11.x by @zyyw in #20558
- Fixes-21021 Display proxy cache in project configuration page by @xuelichao in #21048
Other Changes
- fix: update the cron of execution sweep in test by @zyyw in #20636
- fix: change coporate harbor to registry.goharbor.io by @zyyw in #20651
- update ldap by @wy65701436 in #20724
- add Test Case for SBOM feature by @zyyw in #20797
- Fix #20658 docker-compose
version
is obsolete warning by @jhdxr in #20659 - fix: update e2e test engine images by @zyyw in #20845
- refresh base for v2.12 by @wy65701436 in #21095
- fix release script by @wy65701436 in #21101
New Contributors
- @flbla made their first contribution in #20625
- @mohamedawnallah made their first contribution in #20684
- @ethanchowell made their first contribution in #20648
- @kariya-mitsuru made their first contribution in #20619
- @jhdxr made their first contribution in #20659
- @johankok made their first contribution in #20841
- @kunal-511 made their first contribution in #20871
- @BruceAko made their first contribution in #20861
- @4everming made their first contribution in #20929
- @njucjc made their first contribution in #19658
- @bupd made their first contribution in #21033
Full Changelog: v2.11.0...v2.12.0