What's Changed

Component updates ⬆️

• fix: assign metas to key and value by @zyyw in #20126
• [cherry-pick] panic due to mark retention task error by @stonezdj in #20170
• bump golang 1.21.8 on release-2.9.0 by @MinerYang in #20196
• fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.30.23 by @zyyw in #20211
• fix: close file by @zyyw in #20221
• [cherry-pick] Allow empty path in redirect_url by @stonezdj in #20236
• fix: add 400 response code for /scan/{report_id}/log by @zyyw in #20242
• bump golang 1.21.9 on release-2.9.0 by @MinerYang in #20263
• fix: update version of some dependencies by @zyyw in #20268

Full Changelog: v2.9.3...v2.9.4

What's Changed

Component updates ⬆️

• fix: assign metas to key and value by @zyyw in #20126
• [cherry-pick] panic due to mark retention task error by @stonezdj in #20170
• bump golang 1.21.8 on release-2.9.0 by @MinerYang in #20196
• fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.30.23 by @zyyw in #20211
• fix: close file by @zyyw in #20221
• [cherry-pick] Allow empty path in redirect_url by @stonezdj in #20236
• fix: add 400 response code for /scan/{report_id}/log by @zyyw in #20242
• bump golang 1.21.9 on release-2.9.0 by @MinerYang in #20263
• fix: update version of some dependencies by @zyyw in #20268

Full Changelog: v2.9.3...v2.9.4-rc1

What's Changed

Component updates ⬆️

• fix: assign metas to key and value by @zyyw in #20127
• [cherry-pick] panic due to mark retention task error by @stonezdj in #20168
• fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.30.23 by @zyyw in #20212
• fix: close file by @zyyw in #20222
• [cherry-pick] Allow empty path in redirect_url by @stonezdj in #20235
• fix: add 400 response code for /scan/{report_id}/log by @zyyw in #20243
• bump golang to 1.21.9 on release-2.8.0 by @MinerYang in #20267
• fix: update version of some dependencies by @zyyw in #20271

Full Changelog: v2.8.5...v2.8.6-rc1

What's Changed

Component updates ⬆️

• [cherry-pick] panic due to mark retention task error by @stonezdj in #20169
• bump golang to 1.21.8 on release-2.10.0 by @MinerYang in #20194
• fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.30.23 by @zyyw in #20210
• fix: close file by @zyyw in #20220
• [cherry-pick] Allow empty path in redirect_url by @stonezdj in #20237
• fix: test robot account permission by @zyyw in #20241

Full Changelog: v2.10.1...v2.10.2

What's Changed

Component updates ⬆️

• [cherry-pick] panic due to mark retention task error by @stonezdj in #20169
• bump golang to 1.21.8 on release-2.10.0 by @MinerYang in #20194
• fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.30.23 by @zyyw in #20210
• fix: close file by @zyyw in #20220
• [cherry-pick] Allow empty path in redirect_url by @stonezdj in #20237
• fix: test robot account permission by @zyyw in #20241

Full Changelog: v2.10.1...v2.10.2-rc1

What's Changed

Enhancement 🚀

• [cherry-pick]remove the log for ScannerSkipUpdatePullTime by @wy65701436 in #19846

Component updates ⬆️

• [cherry-pick]Add quota permissions to robot account by @YangJiao0817 in #19800
• [cherry-pick]Remove robot account update quota permission by @YangJiao0817 in #19818
• [cherry-pick] Cache image list with digest key by @stonezdj in #19838
• [Cherry pick] add repository read permission to limitedGuest by @tpoxa in #19816
• [cherry-pick]fix label select bugs (#19850) by @YangJiao0817 in #19862
• [cherry-pick]add v6 port for nginx ad portal config by @MinerYang in #19894
• add ip_family config in harbor.yml on release-2.10 by @MinerYang in #19939
• reverse ip_family config for release-2.10 by @MinerYang in #19950
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19998
• [cherry-pick] limit url to local site by @stonezdj in #20020
• [cherry-pick] Move strong_ssl_ciphers to top level in harbor.yaml by @stonezdj in #20022
• update go.mod dep, golangci-lint, mocks by @zyyw in #20121

Other Changes

• [cherry-pick]Add notation replication test case by @YangJiao0817 in #19739
• [cherry-pick]Add multi-tier accessory replication test cases by @YangJiao0817 in #19736
• [cherry-pick]Add quota permissions testcase by @YangJiao0817 in #19823
• [Cherry-Pick] Update replication rule filter label xpath (#19895) by @zyyw in #19904
• [Cherry-pick] fix: cve export label filter xpath (#19931) by @zyyw in #19947
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19960

Full Changelog: v2.10.0...v2.10.1

What's Changed

Enhancement 🚀

• [cherry-pick]remove the log for ScannerSkipUpdatePullTime by @wy65701436 in #19846

Component updates ⬆️

• [cherry-pick]Add quota permissions to robot account by @YangJiao0817 in #19800
• [cherry-pick]Remove robot account update quota permission by @YangJiao0817 in #19818
• [cherry-pick] Cache image list with digest key by @stonezdj in #19838
• [Cherry pick] add repository read permission to limitedGuest by @tpoxa in #19816
• [cherry-pick]fix label select bugs (#19850) by @YangJiao0817 in #19862
• [cherry-pick]add v6 port for nginx ad portal config by @MinerYang in #19894
• add ip_family config in harbor.yml on release-2.10 by @MinerYang in #19939
• reverse ip_family config for release-2.10 by @MinerYang in #19950
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19998
• [cherry-pick] limit url to local site by @stonezdj in #20020
• [cherry-pick] Move strong_ssl_ciphers to top level in harbor.yaml by @stonezdj in #20022
• update go.mod dep, golangci-lint, mocks by @zyyw in #20121

Other Changes

• [cherry-pick]Add notation replication test case by @YangJiao0817 in #19739
• [cherry-pick]Add multi-tier accessory replication test cases by @YangJiao0817 in #19736
• [cherry-pick]Add quota permissions testcase by @YangJiao0817 in #19823
• [Cherry-Pick] Update replication rule filter label xpath (#19895) by @zyyw in #19904
• [Cherry-pick] fix: cve export label filter xpath (#19931) by @zyyw in #19947
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19960

Full Changelog: v2.10.0...v2.10.1-rc1

Known issue

• Due to this code change, users cannot call Harbor swagger API to add or update a project metadata, but it does not affect project configuration via Harbor portal UI. This issue is tracking this matter.

What's Changed

Component updates ⬆️

• add ip_family config in harbor.yml on release-2.9.0 by @MinerYang in #19940
• Refresh base images on release-2.9.0 by @zyyw in #19941
• reverse ip_family config for release-2.9 by @MinerYang in #19951
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19997
• [cherry-pick] Limit URL to local site by @stonezdj in #20023
• Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in #20021
• fix: update go.mod (vendor) & golangci-lint & mocks by @zyyw in #20070

Other Changes

• fix: change filter_label_xpath to vulnerabilities_filter_label_xpath … by @zyyw in #19930
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19958
• Refresh base images on release-2.9.0 by @zyyw in #20005

Full Changelog: v2.9.2...v2.9.3

What's Changed

Component updates ⬆️

• add ip_family config in harbor.yml on release-2.9.0 by @MinerYang in #19940
• Refresh base images on release-2.9.0 by @zyyw in #19941
• reverse ip_family config for release-2.9 by @MinerYang in #19951
• [Cherry-pick] feat: enable configuration of skip_java_db_update by @zyyw in #19997
• [cherry-pick] Limit URL to local site by @stonezdj in #20023
• Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in #20021
• fix: update go.mod (vendor) & golangci-lint & mocks by @zyyw in #20070

Other Changes

• fix: change filter_label_xpath to vulnerabilities_filter_label_xpath … by @zyyw in #19930
• update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in #19958
• Refresh base images on release-2.9.0 by @zyyw in #20005

Full Changelog: v2.9.2...v2.9.3-rc2

Known issue

• Due to this code change, users cannot call Harbor swagger API to add or update a project metadata, but it does not affect project configuration via Harbor portal UI. This issue is tracking this matter.

What's Changed

Component updates ⬆️

• [Cherry-pick]Add new uri path to ShouldNotReuseRoute array by @AllForNothing in #19219
• (cherry-pick) Remove job status track information from redis after stop the job in the queue by @stonezdj in #19305
• (cherry-pick)fix storage.redirect.disable migrate template error release-2.8.0 by @MinerYang in #19337
• [cherry-pick] Allow POST method to request service/token in readonly mode by @stonezdj in #19562
• [cherry-pick] fix: increase beego max memory and upload size (#19578) by @stonezdj in #19670
• [cherry-pick]Limit URL to local site by @stonezdj in #20024
• feat: bump up golang-runtime from 1.20.7 to 1.21.7 by @zyyw in #20046
• fix: update TRIVYVERSION=v0.49.1 && TRIVYADAPTERVERSION=v0.30.22 by @zyyw in #20040
• fix: update go.mod by @zyyw in #20071

Full Changelog: v2.8.4...v2.8.5