Harbor v2.15.11

Released 2026-10-12.

Supported until v2.17. Container Registry supports the current and previous minor releases; this version reaches end of support when the second newer minor (v2.17) is published.

Fixes

contenttrust: Allow The Legacy Signer Pull By Default (backport #1191) (#1192)
member: Allow System Robots With All-Project Member Access To Grant Project-Admin (backport #1210) (#1211)
webhook: Add Webhook Egress Policy Levels And Allowlist (backport #1185) (#1186)

Updates

Bump trivy-adapter to v0.42.0 (backport #1175) (#1193)
Bump Trivy to 0.75.0 (backport #1176) (#1194)

Reverts

Drop The System Robot Project-Admin Grant Exemption (backport #1211 revert) (#1213)

Container Images

Multi-arch images (linux/amd64, linux/arm64) signed with cosign.

Image	Reference
`harbor-core`	`8gears.container-registry.com/8gcr/harbor-core:v2.15.11`
`harbor-jobservice`	`8gears.container-registry.com/8gcr/harbor-jobservice:v2.15.11`
`harbor-registryctl`	`8gears.container-registry.com/8gcr/harbor-registryctl:v2.15.11`
`harbor-exporter`	`8gears.container-registry.com/8gcr/harbor-exporter:v2.15.11`
`harbor-portal`	`8gears.container-registry.com/8gcr/harbor-portal:v2.15.11`
`harbor-registry`	`8gears.container-registry.com/8gcr/harbor-registry:v2.15.11`
`trivy-adapter`	`8gears.container-registry.com/8gcr/trivy-adapter:v2.15.11`

Verify an image signature:

cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/release-please.yml@refs/heads/release-2.15" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.11