What's Changed

Component updates ⬆️

• [cherry-pick] panic due to mark retention task error by @stonezdj in #20169
• bump golang to 1.21.8 on release-2.10.0 by @MinerYang in #20194
• fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.30.23 by @zyyw in #20210
• fix: close file by @zyyw in #20220
• [cherry-pick] Allow empty path in redirect_url by @stonezdj in #20237
• fix: test robot account permission by @zyyw in #20241

Full Changelog: v2.10.1...v2.10.2-rc1

What's Changed

Enhancement 🚀

• [cherry-pick]remove the log for ScannerSkipUpdatePullTime by @wy65701436 in #19846

Component updates ⬆️

• [cherry-pick]Add quota permissions to robot account by @YangJiao0817 in #19800
• [cherry-pick]Remove robot account update quota permission by @YangJiao0817 in #19818
• [cherry-pick] Cache image list with digest key by @stonezdj in #19838
• [Cherry pick] add repository read permission to limitedGuest by @tpoxa in #19816
• [cherry-pick]fix label select bugs (#19850) by @YangJiao0817 in #19862
• [cherry-pick]add v6 port for nginx ad portal config by @MinerYang in #19894
• add ip_family config in harbor.yml on release-2.10 by @MinerYang in #19939
• reverse ip_family config for release-2.10 by @MinerYang in #19950
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19998
• [cherry-pick] limit url to local site by @stonezdj in #20020
• [cherry-pick] Move strong_ssl_ciphers to top level in harbor.yaml by @stonezdj in #20022
• update go.mod dep, golangci-lint, mocks by @zyyw in #20121

Other Changes

• [cherry-pick]Add notation replication test case by @YangJiao0817 in #19739
• [cherry-pick]Add multi-tier accessory replication test cases by @YangJiao0817 in #19736
• [cherry-pick]Add quota permissions testcase by @YangJiao0817 in #19823
• [Cherry-Pick] Update replication rule filter label xpath (#19895) by @zyyw in #19904
• [Cherry-pick] fix: cve export label filter xpath (#19931) by @zyyw in #19947
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19960

Full Changelog: v2.10.0...v2.10.1

What's Changed

Enhancement 🚀

• [cherry-pick]remove the log for ScannerSkipUpdatePullTime by @wy65701436 in #19846

Component updates ⬆️

• [cherry-pick]Add quota permissions to robot account by @YangJiao0817 in #19800
• [cherry-pick]Remove robot account update quota permission by @YangJiao0817 in #19818
• [cherry-pick] Cache image list with digest key by @stonezdj in #19838
• [Cherry pick] add repository read permission to limitedGuest by @tpoxa in #19816
• [cherry-pick]fix label select bugs (#19850) by @YangJiao0817 in #19862
• [cherry-pick]add v6 port for nginx ad portal config by @MinerYang in #19894
• add ip_family config in harbor.yml on release-2.10 by @MinerYang in #19939
• reverse ip_family config for release-2.10 by @MinerYang in #19950
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19998
• [cherry-pick] limit url to local site by @stonezdj in #20020
• [cherry-pick] Move strong_ssl_ciphers to top level in harbor.yaml by @stonezdj in #20022
• update go.mod dep, golangci-lint, mocks by @zyyw in #20121

Other Changes

• [cherry-pick]Add notation replication test case by @YangJiao0817 in #19739
• [cherry-pick]Add multi-tier accessory replication test cases by @YangJiao0817 in #19736
• [cherry-pick]Add quota permissions testcase by @YangJiao0817 in #19823
• [Cherry-Pick] Update replication rule filter label xpath (#19895) by @zyyw in #19904
• [Cherry-pick] fix: cve export label filter xpath (#19931) by @zyyw in #19947
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19960

Full Changelog: v2.10.0...v2.10.1-rc1

Known issue

• Due to this code change, users cannot call Harbor swagger API to add or update a project metadata, but it does not affect project configuration via Harbor portal UI. This issue is tracking this matter.

What's Changed

Component updates ⬆️

• add ip_family config in harbor.yml on release-2.9.0 by @MinerYang in #19940
• Refresh base images on release-2.9.0 by @zyyw in #19941
• reverse ip_family config for release-2.9 by @MinerYang in #19951
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19997
• [cherry-pick] Limit URL to local site by @stonezdj in #20023
• Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in #20021
• fix: update go.mod (vendor) & golangci-lint & mocks by @zyyw in #20070

Other Changes

• fix: change filter_label_xpath to vulnerabilities_filter_label_xpath … by @zyyw in #19930
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19958
• Refresh base images on release-2.9.0 by @zyyw in #20005

Full Changelog: v2.9.2...v2.9.3

What's Changed

Component updates ⬆️

• add ip_family config in harbor.yml on release-2.9.0 by @MinerYang in #19940
• Refresh base images on release-2.9.0 by @zyyw in #19941
• reverse ip_family config for release-2.9 by @MinerYang in #19951
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19997
• [cherry-pick] Limit URL to local site by @stonezdj in #20023
• Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in #20021
• fix: update go.mod (vendor) & golangci-lint & mocks by @zyyw in #20070

Other Changes

• fix: change filter_label_xpath to vulnerabilities_filter_label_xpath … by @zyyw in #19930
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19958
• Refresh base images on release-2.9.0 by @zyyw in #20005

Full Changelog: v2.9.2...v2.9.3-rc2

Known issue

• Due to this code change, users cannot call Harbor swagger API to add or update a project metadata, but it does not affect project configuration via Harbor portal UI. This issue is tracking this matter.

What's Changed

Component updates ⬆️

• [Cherry-pick]Add new uri path to ShouldNotReuseRoute array by @AllForNothing in #19219
• (cherry-pick) Remove job status track information from redis after stop the job in the queue by @stonezdj in #19305
• (cherry-pick)fix storage.redirect.disable migrate template error release-2.8.0 by @MinerYang in #19337
• [cherry-pick] Allow POST method to request service/token in readonly mode by @stonezdj in #19562
• [cherry-pick] fix: increase beego max memory and upload size (#19578) by @stonezdj in #19670
• [cherry-pick]Limit URL to local site by @stonezdj in #20024
• feat: bump up golang-runtime from 1.20.7 to 1.21.7 by @zyyw in #20046
• fix: update TRIVYVERSION=v0.49.1 && TRIVYADAPTERVERSION=v0.30.22 by @zyyw in #20040
• fix: update go.mod by @zyyw in #20071

Full Changelog: v2.8.4...v2.8.5

What's Changed

Component updates ⬆️

• [Cherry-pick]Add new uri path to ShouldNotReuseRoute array by @AllForNothing in #19219
• (cherry-pick) Remove job status track information from redis after stop the job in the queue by @stonezdj in #19305
• (cherry-pick)fix storage.redirect.disable migrate template error release-2.8.0 by @MinerYang in #19337
• [cherry-pick] Allow POST method to request service/token in readonly mode by @stonezdj in #19562
• [cherry-pick] fix: increase beego max memory and upload size (#19578) by @stonezdj in #19670
• [cherry-pick]Limit URL to local site by @stonezdj in #20024
• feat: bump up golang-runtime from 1.20.7 to 1.21.7 by @zyyw in #20046
• fix: update TRIVYVERSION=v0.49.1 && TRIVYADAPTERVERSION=v0.30.22 by @zyyw in #20040
• fix: update go.mod by @zyyw in #20071

Full Changelog: v2.8.4...v2.8.5-rc1

What's Changed

Component updates ⬆️

• add ip_family config in harbor.yml on release-2.9.0 by @MinerYang in #19940
• Refresh base images on release-2.9.0 by @zyyw in #19941
• reverse ip_family config for release-2.9 by @MinerYang in #19951
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19997
• [cherry-pick] Limit URL to local site by @stonezdj in #20023
• Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in #20021

Other Changes

• fix: change filter_label_xpath to vulnerabilities_filter_label_xpath … by @zyyw in #19930
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19958
• Refresh base images on release-2.9.0 by @zyyw in #20005

Full Changelog: v2.9.2...v2.9.3-rc1

Known issue

• known issue #19932 will affect nginx component of offline-installer where installed the harbor on the machine only supported ipv4. Impact version is v2.9.2, will be fixed version v2.9.3. As a workaround please refer to reconfigure-nginx
• known issue #19912 will affect nginx component of offline-installer when specify strong_cipher.enabled in harbor.yml but not been rendered in config file properly. Impact version are v2.9.0, v2.9.1, v2.9.2, v2.10.0. Will be fixed in v2.10.1. if you do need set strong_cipher, please refer to manually-add-strong-cipher

What's Changed

Enhancement 🚀

• [cherry-pick]remove the log for ScannerSkipUpdatePullTime by @wy65701436 in #19847

Component updates ⬆️

• [cherry-pick] Allow POST method to request service/token in readonly mode by @stonezdj in #19563
• [cherry-pick] Cache image list with digest key by @stonezdj in #19837
• [Cherry pick] add repository read permission to limitedGuest by @tpoxa in #19815
• Refresh base images on release-2.9.0 by @YangJiao0817 in #19851
• fix: update to TRIVYVERSION=v0.48.3 and TRIVYADAPTERVERSION=v0.30.21 by @zyyw in #19857
• [cherry-pick]fix label select bugs (#19850) by @YangJiao0817 in #19861
• Refresh base images on release-2.9.0 by @zyyw in #19891
• [cherry-pick]add v6 port for nginx ad portal config by @MinerYang in #19893
• [cherry-pick] ] support accessory in either order by @wy65701436 in #19906

Other Changes

• [cherry-pick]Add banner message UI test case by @YangJiao0817 in #19530
• [cherry-pick]Add notation sign artifact API test case by @YangJiao0817 in #19550
• [cherry-pick]Add notation accessory copy test case by @YangJiao0817 in #19606
• [cherry-pick]Add notation pull policy test case by @YangJiao0817 in #19626
• [cherry-pick]Add jump to CNAB Bundle index artifact list test case by @YangJiao0817 in #19628
• [cherry-pick]Add user API test case by @YangJiao0817 in #19637
• [cherry-pick]Add notation replication test case by @YangJiao0817 in #19740
• [cherry-pick]Add multi-tier accessory replication test cases by @YangJiao0817 in #19737
• Fix Init Chrome Driver error by @YangJiao0817 in #19900
• [cherry-pick]Update replication rule filter label xpath by @YangJiao0817 in #19901
• fix: cve export label filter xpath by @zyyw in #19913

Full Changelog: v2.9.1...v2.9.2

What's Changed

Enhancement 🚀

• [cherry-pick]remove the log for ScannerSkipUpdatePullTime by @wy65701436 in #19847

Component updates ⬆️

• [cherry-pick] Allow POST method to request service/token in readonly mode by @stonezdj in #19563
• [cherry-pick] Cache image list with digest key by @stonezdj in #19837
• [Cherry pick] add repository read permission to limitedGuest by @tpoxa in #19815
• Refresh base images on release-2.9.0 by @YangJiao0817 in #19851
• fix: update to TRIVYVERSION=v0.48.3 and TRIVYADAPTERVERSION=v0.30.21 by @zyyw in #19857
• [cherry-pick]fix label select bugs (#19850) by @YangJiao0817 in #19861
• Refresh base images on release-2.9.0 by @zyyw in #19891
• [cherry-pick]add v6 port for nginx ad portal config by @MinerYang in #19893
• [cherry-pick] ] support accessory in either order by @wy65701436 in #19906

Other Changes

• [cherry-pick]Add banner message UI test case by @YangJiao0817 in #19530
• [cherry-pick]Add notation sign artifact API test case by @YangJiao0817 in #19550
• [cherry-pick]Add notation accessory copy test case by @YangJiao0817 in #19606
• [cherry-pick]Add notation pull policy test case by @YangJiao0817 in #19626
• [cherry-pick]Add jump to CNAB Bundle index artifact list test case by @YangJiao0817 in #19628
• [cherry-pick]Add user API test case by @YangJiao0817 in #19637
• [cherry-pick]Add notation replication test case by @YangJiao0817 in #19740
• [cherry-pick]Add multi-tier accessory replication test cases by @YangJiao0817 in #19737
• Fix Init Chrome Driver error by @YangJiao0817 in #19900
• [cherry-pick]Update replication rule filter label xpath by @YangJiao0817 in #19901

Full Changelog: v2.9.1...v2.9.2-rc1