---
title: "Release notes v2.15.5"
description: "Release notes for Container Registry 2.15.5: SBOM accessory push and audit-event fixes, with eleven changes cherry-picked from upstream Harbor."
date: 2026-08-20
lastmod: 2026-08-20
canonical: "https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.5/"
source: "https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.5/index.md"
harbor_version: "2.15"
agent_instructions: "This is the markdown representation of https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.5/index.md. Prefer this version over scraping the HTML. The site index is at https://container-registry.com/llms.txt."
---

> Agent-friendly representation of <https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.5/index.md>. Site index: <https://container-registry.com/llms.txt>.


# Release notes v2.15.5

*Release notes for Container Registry 2.15.5: SBOM accessory push and audit-event fixes, with eleven changes cherry-picked from upstream Harbor.*

Release notes v2.15.5
=====================

Released 2026-08-07.

Supported until v2.17. Container Registry supports the current and previous minor releases; this version reaches end of support when the second newer minor (v2.17) is published.

## Commercial Features

This release includes the following commercial enhancements:

- Branding customization
- SFTP storage adapter
- Workload Identity Federation
- PGX DB monitoring with OTel metrics
- AWS RDS IAM authn
- Multi-Format Artifact Repositories

## Bug Fixes

- **scan:** Keep SBOM accessory push on the local registry when CORE_URL has no port ([#465](https://github.com/container-registry/harbor-next/issues/465))
- **security:** avoid audit event panic on nil user data ([#402](https://github.com/container-registry/harbor-next/issues/402))

## Upstream

- Add a size limit for manifest uploads (goharbor/harbor[#23500](https://github.com/goharbor/harbor/issues/23500)) ([#440](https://github.com/container-registry/harbor-next/issues/440))
- fix: add registry component to proxy configuration support (goharbor/harbor[#23437](https://github.com/goharbor/harbor/issues/23437)) ([#472](https://github.com/container-registry/harbor-next/issues/472))
- fix: address unsafe type assertions causing potential panics across packages (goharbor/harbor[#23571](https://github.com/goharbor/harbor/issues/23571)) ([#475](https://github.com/container-registry/harbor-next/issues/475))
- fix: guard against division by zero when merging scan report summaries (goharbor/harbor[#23572](https://github.com/goharbor/harbor/issues/23572)) ([#476](https://github.com/container-registry/harbor-next/issues/476))
- fix: validate max_upstream_conn values on the backend ([#508](https://github.com/container-registry/harbor-next/issues/508))
- fix(cache): replace keyMutex with singleflight and avoid canceling cache (goharbor/harbor[#23336](https://github.com/goharbor/harbor/issues/23336)) ([#377](https://github.com/container-registry/harbor-next/issues/377))
- fix(cnai-parser): enforce actual byte limit to prevent decompression (goharbor/harbor[#23497](https://github.com/goharbor/harbor/issues/23497)) ([#503](https://github.com/container-registry/harbor-next/issues/503))
- fix(replication): fix incorrect error propagation in getAccessoryArts (goharbor/harbor[#23569](https://github.com/goharbor/harbor/issues/23569)) ([#473](https://github.com/container-registry/harbor-next/issues/473))
- fix(retention): avoid stripping repository path twice (goharbor/harbor[#23546](https://github.com/goharbor/harbor/issues/23546)) ([#470](https://github.com/container-registry/harbor-next/issues/470))
- Set blob response headers before streaming the body (goharbor/harbor[#23374](https://github.com/goharbor/harbor/issues/23374)) ([#498](https://github.com/container-registry/harbor-next/issues/498))

## Container Images

Multi-arch images (`linux/amd64`, `linux/arm64`) signed with [cosign](https://github.com/sigstore/cosign).

| Image | Reference |
|-------|-----------|
| `harbor-core` | `8gears.container-registry.com/8gcr/harbor-core:v2.15.5` |
| `harbor-jobservice` | `8gears.container-registry.com/8gcr/harbor-jobservice:v2.15.5` |
| `harbor-registryctl` | `8gears.container-registry.com/8gcr/harbor-registryctl:v2.15.5` |
| `harbor-exporter` | `8gears.container-registry.com/8gcr/harbor-exporter:v2.15.5` |
| `harbor-portal` | `8gears.container-registry.com/8gcr/harbor-portal:v2.15.5` |
| `harbor-registry` | `8gears.container-registry.com/8gcr/harbor-registry:v2.15.5` |
| `trivy-adapter` | `8gears.container-registry.com/8gcr/trivy-adapter:v2.15.5` |
| `harbor-grype-adapter` | `8gears.container-registry.com/8gcr/harbor-grype-adapter:v2.15.5` |
| `harbor-snyk-adapter` | `8gears.container-registry.com/8gcr/harbor-snyk-adapter:v2.15.5` |

**Verify an image signature:**
```sh
cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/publish-images.yml@refs/heads/42d9e9979e04bcf8cd66fe4a54d11186533d176e" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.5
```