Release notes v2.15.1

Released 2026-06-11. Compare with v2.15.0.

Bug Fixes

• Install gh CLI in release workflow
• Preserve categorized release notes (#215)
• Push Trivy Adapter Images Without Harbor Prefix (#227)
• Update release-please-config-maintenance.json (#278)

Upstream

• Call /v2/auth/token api to get bearer token for dockerhub adapter
• feat(gc): use human-readable sizes in GC log messages
• feat(session): prevent background polling from renewing session TTL
• Fix issue related to scanner API
• fix(auditext): add nil guard in manager Create
• fix(dao): use context-aware methods for database operations in MetaDAO
• fix(distribution): allow editing instance without credentials
• fix(gc): redact redis_url_reg from GC extra attrs
• fix(scan): use created time from annotations in accessory art
• perf(blob): fix full table scan in unassociation check

Commercial Features

This release includes the following commercial enhancements:

• Branding customization
• Hybrid multi-auth
• SFTP storage adapter
• Workload Identity Federation
• PGX DB monitoring with OTel metrics
• AWS RDS IAM authn

Container Images

Multi-arch images (linux/amd64, linux/arm64) signed with cosign.

Verify an image signature:

cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/release-please.yml@refs/heads/release-2.15" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.1