Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: HarborClear ×

Harborv2.15.2Storage & DataJul 2, 2026

ACTION 1CHECK 2OTHER 21View full analysis

A maintenance release with a forced internal PostgreSQL major-version upgrade, a redis to valkey cache backend replacement, dependency and component updates, and defect corrections. Token and blob-mount validation is hardened.

Action needed (1)

securityToken and blob-mount source validation
Blob-mount source projects are validated, and tokens without iat are rejected.

Check if affected (2)

breakingThe bundled PostgreSQL version, upgraded
Applies if you use PostgreSQL.
The bundled internal database changes from PostgreSQL 15 to PostgreSQL 18 via pg_upgrade during container startup in Harbor v2.15.2 with Helm Chart v1.19.2.
breakingThe cache backend, changed from redis to valkey
Applies if you use redis.
The cache backend is replaced from redis with valkey.

Source ↗

Harborv2.15.1Storage & DataMay 6, 2026

ACTION 1OTHER 13View full analysis

Harbor v2.15.1 is a maintenance release with defect corrections, behavior changes, and dependency and base-image updates. It also updates photon packages to fix CVEs.

Action needed (1)

securityphoton packages CVE fixes
The photon packages are updated to fix CVEs in Harbor v2.15.1.

Source ↗

Harborv2.15.0Storage & DataMar 20, 2026

ACTION 2CHECK 2OTHER 72View full analysis

A feature and compatibility release adds registry, cache, signing, profiling, and configuration capabilities. It changes proxy-cache behavior, removes GCR replication, and includes dependency, base-component, and defect corrections.

Action needed (2)

securityBearer token validation
Harbor rejects bearer tokens issued before project creation.
breakingPort 9443 removed from the webhook event check
Port 9443 is removed from the Harbor IP used for webhook event checks.

Check if affected (2)

breakingThe pull-through cache is replaced by proxy cache
Applies if you use pull-through cache in Harbor.
Harbor replaces the pull-through cache with the proxy cache.
breakingGCR replication removal
Applies if you use GCR replication in Harbor.
GCR replication is removed because the GCR account is removed.

Source ↗

Harborv2.13.5Storage & DataMar 10, 2026

ACTION 1OTHER 5View full analysis

Bearer tokens issued before project creation are rejected. The release also updates dependencies and components and removes payload data from the configuration audit log.

Action needed (1)

securityRejection of bearer tokens issued before project creation
The security enforcement rejects bearer tokens issued before project creation.

Source ↗

Harborv2.14.3Storage & DataMar 10, 2026

ACTION 1OTHER 7View full analysis

This release updates base images, dependencies, and Trivy components, and changes the audit-log payload. It also rejects bearer tokens issued before project creation.

Action needed (1)

securityBearer tokens issued before project creation rejected
The security fix rejects bearer tokens issued before project creation.

Source ↗

Browse by month