Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Mar 2026Clear ×

Harborv2.15.0Storage & DataMar 20, 2026

ACTION 2CHECK 2OTHER 72View full analysis

A feature and compatibility release adds registry, cache, signing, profiling, and configuration capabilities. It changes proxy-cache behavior, removes GCR replication, and includes dependency, base-component, and defect corrections.

Action needed (2)

securityBearer token validation
Harbor rejects bearer tokens issued before project creation.
breakingPort 9443 removed from the webhook event check
Port 9443 is removed from the Harbor IP used for webhook event checks.

Check if affected (2)

breakingThe pull-through cache is replaced by proxy cache
Applies if you use pull-through cache in Harbor.
breakingGCR replication removal
Applies if you use GCR replication in Harbor.

Source ↗

Harborv2.13.5Storage & DataMar 10, 2026

ACTION 1OTHER 5View full analysis

Bearer tokens issued before project creation are rejected. The release also updates dependencies and components and removes payload data from the configuration audit log.

Action needed (1)

securityRejection of bearer tokens issued before project creation
The security enforcement rejects bearer tokens issued before project creation.

Source ↗

Harborv2.14.3Storage & DataMar 10, 2026

ACTION 1OTHER 7View full analysis

This release updates base images, dependencies, and Trivy components, and changes the audit-log payload. It also rejects bearer tokens issued before project creation.

Action needed (1)

securityBearer tokens issued before project creation rejected
The security fix rejects bearer tokens issued before project creation.

Source ↗

Dragonflyv2.4.2Storage & DataMar 9, 2026

ACTION 1CHECK 1OTHER 19View full analysis

A feature and maintenance release that expands configuration and scheduler capabilities while changing configuration controls and the priorities type. Dependency versions are updated, and no security advisories or explicitly described vulnerabilities are mentioned.

Action needed (1)

breakingThe priorities type, changed to int32
The priorities type changed from string to int32 in v2.4.2.

Check if affected (1)

breakingThe Enable flag, removed from seedPeer
Applies if you configure Enable.

Source ↗

Browse by month