Harbor

v2.15.5Storage & Data

2026年11月12日

正確性に関する修正と依存関係、コンポーネントの更新を中心とした保守リリースです。セキュリティ対応の依存関係更新を含み、オペレーターのセットアップに大きな変更はありません。

要対応 (1)

その他の記録済み変更 14 件すべてfixes 8 · value changes 6

* fix(portal): Add the missing i18n entries for the operate action and the configuration resource by @bupd in https://github.com/goharbor/harbor/pull/24104
* fix(http): redact the pagination Link in rejection errors by @bupd in https://github.com/goharbor/harbor/pull/24095
* fix(api): bound audited and manifest request bodies by @bupd in https://github.com/goharbor/harbor/pull/24102
* fix(webhook): store the normalized target address (backport #24075) by @bupd in https://github.com/goharbor/harbor/pull/24098
* [release-2.15] fix(cnai-parser): enforce actual byte limit to prevent decompression (#23497) by @Vad1mo in https://github.com/goharbor/harbor/pull/24146
* [release-2.15] fix(replication): make the image resource filter take effect again (#24176) by @chlins in https://github.com/goharbor/harbor/pull/24180
* fix(http): compare the IPv6 zone identifier exactly in SameOrigin by @bupd in https://github.com/goharbor/harbor/pull/24096
* fix(registry): redact the upload Location in rejection errors by @bupd in https://github.com/goharbor/harbor/pull/24094

* [release-2.15] bump: bump Go to 1.26.10 for release-2.15.0 by @Vad1mo in https://github.com/goharbor/harbor/pull/24211
* Bump Trivy to v0.76.2 and adapter to v0.40.1-rc1 by @stonezdj in https://github.com/goharbor/harbor/pull/24339
* Bump up distribution to v2.8.3-harbor.4-rc1 and bump up golang to 1.27.3 by @stonezdj in https://github.com/goharbor/harbor/pull/24351
* (cherry-pick): preserve artifact type for multi-tier accessories by @stonezdj in https://github.com/goharbor/harbor/pull/24360
* (cherry-pick): ignore 401 when listing labels of a Harbor registry by @stonezdj in https://github.com/goharbor/harbor/pull/24359
* chore(deps-dev): bump copy-webpack-plugin from 11.0.0 to 14.0.0 in /src/portal/app-swagger-ui by @dependabot[bot] in https://github.com/goharbor/harbor/pull/23847

Harborをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。今回のセキュリティパッチも、その一例です。