RATATOSKRATATOSK
Sign in

Harbor

v2.15.2Storage & Data
Jul 2, 2026

Harbor v2.15.2 is a maintenance patch backporting fixes from 2.15.0, with the most operator-visible change being the replacement of Redis with Valkey as the cache backend. It also hardens blob-mount token validation, cleans up crypto and SMTP dependencies, and delivers a large set of UI/UX fixes following the Angular 21 and Clarity v18 upgrade.

Key changes (7)

  • Cache backend replaced: Redis swapped out for Valkey (affects deployment configs referencing Redis)
  • Security: blob-mount token validation now rejects tokens missing iat and validates source project (medium severity)
  • Security: crypto usage hardened; unused SMTP package removed (low severity)
  • Harbor UI upgraded to Angular 21, Clarity v18, Node.js v22, with numerous UI/UX fixes (checkboxes, dark theme, i18n, form styling, pull command tag selection)
  • YAML library replaced: gopkg.in/yaml.v2 swapped for github.com/goccy/go-yaml
  • Registry image pinned to stable tag v2.8.3-harbor.1 (previously rc.5)
  • repository update_time now bumps correctly on tag and artifact changes; Cosign tlog verification adjusted
Source ↗All Harbor releases →