RATATOSKRATATOSK
Sign in

Harbor

v2.15.5Storage & Data
Nov 12, 2026

ACTION 1OTHER 14

A maintenance release focused on correctness fixes, dependency and component updates, and security-related dependency refreshes. It does not introduce major changes to operator setup.

Action needed (1)

  • securityThe photon component and Go modules, updated

    Go modules were updated for CVE fixes, and photon was bumped in this release.

    harbor#24336

All 14 other recorded changesfixes 8 · value changes 6

fixes (8)

  • * fix(portal): Add the missing i18n entries for the operate action and the configuration resource by @bupd in https://github.com/goharbor/harbor/pull/24104
  • * fix(http): redact the pagination Link in rejection errors by @bupd in https://github.com/goharbor/harbor/pull/24095
  • * fix(api): bound audited and manifest request bodies by @bupd in https://github.com/goharbor/harbor/pull/24102
  • * fix(webhook): store the normalized target address (backport #24075) by @bupd in https://github.com/goharbor/harbor/pull/24098
  • * [release-2.15] fix(cnai-parser): enforce actual byte limit to prevent decompression (#23497) by @Vad1mo in https://github.com/goharbor/harbor/pull/24146
  • * [release-2.15] fix(replication): make the image resource filter take effect again (#24176) by @chlins in https://github.com/goharbor/harbor/pull/24180
  • * fix(http): compare the IPv6 zone identifier exactly in SameOrigin by @bupd in https://github.com/goharbor/harbor/pull/24096
  • * fix(registry): redact the upload Location in rejection errors by @bupd in https://github.com/goharbor/harbor/pull/24094

value changes (6)

  • * [release-2.15] bump: bump Go to 1.26.10 for release-2.15.0 by @Vad1mo in https://github.com/goharbor/harbor/pull/24211
  • * Bump Trivy to v0.76.2 and adapter to v0.40.1-rc1 by @stonezdj in https://github.com/goharbor/harbor/pull/24339
  • * Bump up distribution to v2.8.3-harbor.4-rc1 and bump up golang to 1.27.3 by @stonezdj in https://github.com/goharbor/harbor/pull/24351
  • * (cherry-pick): preserve artifact type for multi-tier accessories by @stonezdj in https://github.com/goharbor/harbor/pull/24360
  • * (cherry-pick): ignore 401 when listing labels of a Harbor registry by @stonezdj in https://github.com/goharbor/harbor/pull/24359
  • * chore(deps-dev): bump copy-webpack-plugin from 11.0.0 to 14.0.0 in /src/portal/app-swagger-ui by @dependabot[bot] in https://github.com/goharbor/harbor/pull/23847
Add Harbor to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Harbor releases →