Harbor v2.15.8

Released 2026-08-26.

Supported until v2.17. Container Registry supports the current and previous minor releases; this version reaches end of support when the second newer minor (v2.17) is published.

Features

• Replace ValidateHTTPURL with schema-aware ValidateURL (#744)

Fixes

• Backport Authoritative Harbor Next Schema Reconciliation (#711, #722) (#733)
• orm: Discard AfterCommit hooks of a rolled-back savepoint (#598)
• Reset retired commercial schema version 182 before migration (#748)

Upstream

• chore(deps): bump Go modules to fix known vulnerabilities (goharbor/harbor#23720) (442b6df)
• chore(deps): revert github.com/gorilla/csrf to v1.7.2 (goharbor/harbor#23759) (18decf5)
• chore(deps): update go.mod dependencies to patch versions (goharbor/harbor#23751) (6cfcba3)
• feat(ui): support advanced proxy cache configurations in UI (goharbor/harbor#23536) (7bbcbd4) — Docs: Proxy Cache Projects

Container Images

Multi-arch images (linux/amd64, linux/arm64) signed with cosign.

Verify an image signature:

cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/release-please.yml@refs/heads/release-2.15" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.8