Release notes v2.15.6

Released 2026-08-18.

Supported until v2.17. Container Registry supports the current and previous minor releases; this version reaches end of support when the second newer minor (v2.17) is published.

Commercial Features

This release includes the following commercial enhancements:

Branding customization
SFTP storage adapter
Workload Identity Federation
PGX DB monitoring with OTel metrics
AWS RDS IAM authn
Multi-Format Artifact Repositories

Bug Fixes

scan: make vulnerability report persistence idempotent (#259)

Upstream

fix: use LEFT JOIN in projectBasicSQL to include projects without quota records (goharbor/harbor#23520) (#522)
refactor: remove deprecated io/ioutil usage (goharbor/harbor#23611) (210e54a)
refactor: replace deprecated golang.org/x/net/context (goharbor/harbor#23630) (9ab2392)

Container Images

Multi-arch images (linux/amd64, linux/arm64) signed with cosign.

Image	Reference
`harbor-core`	`8gears.container-registry.com/8gcr/harbor-core:v2.15.6`
`harbor-jobservice`	`8gears.container-registry.com/8gcr/harbor-jobservice:v2.15.6`
`harbor-registryctl`	`8gears.container-registry.com/8gcr/harbor-registryctl:v2.15.6`
`harbor-exporter`	`8gears.container-registry.com/8gcr/harbor-exporter:v2.15.6`
`harbor-portal`	`8gears.container-registry.com/8gcr/harbor-portal:v2.15.6`
`harbor-registry`	`8gears.container-registry.com/8gcr/harbor-registry:v2.15.6`
`trivy-adapter`	`8gears.container-registry.com/8gcr/trivy-adapter:v2.15.6`
`harbor-grype-adapter`	`8gears.container-registry.com/8gcr/harbor-grype-adapter:v2.15.6`
`harbor-snyk-adapter`	`8gears.container-registry.com/8gcr/harbor-snyk-adapter:v2.15.6`

Verify an image signature:

cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/publish-images.yml@refs/heads/7a7f6e2b78f044dca7f6931cba12c94a98ef2f8e" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.6