Release notes v2.15.7

Released 2026-08-24.

Supported until v2.17. Container Registry supports the current and previous minor releases; this version reaches end of support when the second newer minor (v2.17) is published.

Commercial Features

This release includes the following commercial enhancements:

• feat: Add Commercial Feature Gate
• Branding customization
• SFTP storage adapter
• Workload Identity Federation
• PGX DB monitoring with OTel metrics
• AWS RDS IAM authn
• Multi-Format Artifact Repositories
• feat(audit): Add OTLP Audit Log Forwarding

Bug Fixes

• Harden Proxy Cache Repository Filter Validation (#654)
• Prevent 500 on invalid query input (766a4eb)
• registry: prevent JobserviceSecret and stored credential exfiltration (1e2dae4)
• Removed redis URL from error logs exposing potentional redis password (0da7ccc)
• Show Ellipsis For Truncated Tags In Artifact List (#666)

Upstream

• feat(backend): Implement Proxy Cache Repository Filter API (goharbor/harbor#23527) (#653)
• fix: Add \n to the escape pattern (goharbor/harbor#23697) (43f6c53)
• fix: Add missing validation when creating a rb account (goharbor/harbor#23691) (10cc1ba)
• fix: allow resizing of the SBOM column in artifact table (goharbor/harbor#23646) (a8695e5)
• fix: convert setup_timestamp, status_revision, and revision columns to bigint to avoid Y2K38 overflow (#23711) (goharbor/harbor#23718) (9b2a0ab)
• fix: neutralize CSV formula in scan export (goharbor/harbor#23677) (6089668)
• fix: Prevent 500 on invalid query input for robot accounts (goharbor/harbor#23670) (766a4eb)
• fix: Prevent redis pw exposure in error logs (goharbor/harbor#23657) (0da7ccc)
• fix: use errors.Is for sentinel error checks in usergroup controller (goharbor/harbor#23636) (da547b4)
• fix(registry): Refactor registry update handling to improve URL validation (goharbor/harbor#23671) (1e2dae4)
• fix(repoproxy): prevent proxy-cache poisoning via robot-name prefix (goharbor/harbor#23675) (7897002)
• test: accelerate flaky tests by removing time.Sleep (goharbor/harbor#23692) (9530feb)
• test: reduce arbitrary sleep delays in core auth and awsecr tests (goharbor/harbor#23722) (c13ca29)

Container Images

Multi-arch images (linux/amd64, linux/arm64) signed with cosign.

Verify an image signature:

cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/publish-images.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.7