---
title: "Release notes v2.15.7"
description: "Release notes for Container Registry 2.15.7: proxy-cache filter hardening, credential-exfiltration and redis-log fixes, plus upstream security patches."
date: 2026-08-24
lastmod: 2026-08-24
canonical: "https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.7/"
source: "https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.7/index.md"
harbor_version: "2.15"
agent_instructions: "This is the markdown representation of https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.7/index.md. Prefer this version over scraping the HTML. The site index is at https://container-registry.com/llms.txt."
---

> Agent-friendly representation of <https://container-registry.com/docs/2.15/release-notes/release-notes-v2.15.7/index.md>. Site index: <https://container-registry.com/llms.txt>.


# Release notes v2.15.7

*Release notes for Container Registry 2.15.7: proxy-cache filter hardening, credential-exfiltration and redis-log fixes, plus upstream security patches.*

Release notes v2.15.7
=====================

Released 2026-08-24.

Supported until v2.17. Container Registry supports the current and previous minor releases; this version reaches end of support when the second newer minor (v2.17) is published.

## Commercial Features

This release includes the following commercial enhancements:

- feat: Add Commercial Feature Gate
- Branding customization
- SFTP storage adapter
- Workload Identity Federation
- PGX DB monitoring with OTel metrics
- AWS RDS IAM authn
- Multi-Format Artifact Repositories
- feat(audit): Add OTLP Audit Log Forwarding

## Bug Fixes

- Harden Proxy Cache Repository Filter Validation ([#654](https://github.com/container-registry/harbor-next/issues/654))
- Prevent 500 on invalid query input ([766a4eb](https://github.com/container-registry/harbor-next/commit/766a4ebbe650bbd26ab60cd0f9233dbf50642b73))
- **registry:** prevent JobserviceSecret and stored credential exfiltration ([1e2dae4](https://github.com/container-registry/harbor-next/commit/1e2dae4b216ec635c8b937e5526b68e597100843))
- Removed redis URL from error logs exposing potentional redis password ([0da7ccc](https://github.com/container-registry/harbor-next/commit/0da7cccc2ccc7fe3544ebe2561290b344d8ae5ed))
- Show Ellipsis For Truncated Tags In Artifact List ([#666](https://github.com/container-registry/harbor-next/issues/666))

## Upstream

- feat(backend): Implement Proxy Cache Repository Filter API (goharbor/harbor[#23527](https://github.com/goharbor/harbor/issues/23527)) ([#653](https://github.com/container-registry/harbor-next/issues/653))
- fix: Add \n to the escape pattern (goharbor/harbor[#23697](https://github.com/goharbor/harbor/issues/23697)) ([43f6c53](https://github.com/container-registry/harbor-next/commit/43f6c535b5b604b7b567371de6dd5aee85bb83f2))
- fix: Add missing validation when creating a rb account (goharbor/harbor[#23691](https://github.com/goharbor/harbor/issues/23691)) ([10cc1ba](https://github.com/container-registry/harbor-next/commit/10cc1ba073e19362ad107cae83c2fd872fec1a49))
- fix: allow resizing of the SBOM column in artifact table (goharbor/harbor[#23646](https://github.com/goharbor/harbor/issues/23646)) ([a8695e5](https://github.com/container-registry/harbor-next/commit/a8695e57af8432196185a8eedc41050c4ff245f5))
- fix: convert setup_timestamp, status_revision, and revision columns to bigint to avoid Y2K38 overflow ([#23711](https://github.com/goharbor/harbor/issues/23711)) (goharbor/harbor[#23718](https://github.com/goharbor/harbor/issues/23718)) ([9b2a0ab](https://github.com/container-registry/harbor-next/commit/9b2a0aba20278ced8ddec476efb7af36dc81906e))
- fix: neutralize CSV formula in scan export (goharbor/harbor[#23677](https://github.com/goharbor/harbor/issues/23677)) ([6089668](https://github.com/container-registry/harbor-next/commit/6089668b8569156eb0d22201260cc89dffd622d9))
- fix: Prevent 500 on invalid query input for robot accounts (goharbor/harbor[#23670](https://github.com/goharbor/harbor/issues/23670)) ([766a4eb](https://github.com/container-registry/harbor-next/commit/766a4ebbe650bbd26ab60cd0f9233dbf50642b73))
- fix: Prevent redis pw exposure in error logs (goharbor/harbor[#23657](https://github.com/goharbor/harbor/issues/23657)) ([0da7ccc](https://github.com/container-registry/harbor-next/commit/0da7cccc2ccc7fe3544ebe2561290b344d8ae5ed))
- fix: use errors.Is for sentinel error checks in usergroup controller (goharbor/harbor[#23636](https://github.com/goharbor/harbor/issues/23636)) ([da547b4](https://github.com/container-registry/harbor-next/commit/da547b4eb18e96d4eaf7badd53b5db8478180885))
- fix(registry): Refactor registry update handling to improve URL validation (goharbor/harbor[#23671](https://github.com/goharbor/harbor/issues/23671)) ([1e2dae4](https://github.com/container-registry/harbor-next/commit/1e2dae4b216ec635c8b937e5526b68e597100843))
- fix(repoproxy): prevent proxy-cache poisoning via robot-name prefix (goharbor/harbor[#23675](https://github.com/goharbor/harbor/issues/23675)) ([7897002](https://github.com/container-registry/harbor-next/commit/78970025f0f476a067a083ae4d8ae388860c9737))
- test: accelerate flaky tests by removing time.Sleep (goharbor/harbor[#23692](https://github.com/goharbor/harbor/issues/23692)) ([9530feb](https://github.com/container-registry/harbor-next/commit/9530feb5671611bf38eae842e7374ea41736b01f))
- test: reduce arbitrary sleep delays in core auth and awsecr tests (goharbor/harbor[#23722](https://github.com/goharbor/harbor/issues/23722)) ([c13ca29](https://github.com/container-registry/harbor-next/commit/c13ca2931a74021045bd9ce5ff83efe5e449676d))

## Container Images

Multi-arch images (`linux/amd64`, `linux/arm64`) signed with [cosign](https://github.com/sigstore/cosign).

| Image | Reference |
|-------|-----------|
| `harbor-core` | `8gears.container-registry.com/8gcr/harbor-core:v2.15.7` |
| `harbor-jobservice` | `8gears.container-registry.com/8gcr/harbor-jobservice:v2.15.7` |
| `harbor-registryctl` | `8gears.container-registry.com/8gcr/harbor-registryctl:v2.15.7` |
| `harbor-exporter` | `8gears.container-registry.com/8gcr/harbor-exporter:v2.15.7` |
| `harbor-portal` | `8gears.container-registry.com/8gcr/harbor-portal:v2.15.7` |
| `harbor-registry` | `8gears.container-registry.com/8gcr/harbor-registry:v2.15.7` |
| `trivy-adapter` | `8gears.container-registry.com/8gcr/trivy-adapter:v2.15.7` |
| `harbor-grype-adapter` | `8gears.container-registry.com/8gcr/harbor-grype-adapter:v2.15.7` |
| `harbor-snyk-adapter` | `8gears.container-registry.com/8gcr/harbor-snyk-adapter:v2.15.7` |

**Verify an image signature:**
```sh
cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-next/.github/workflows/publish-images.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-core:v2.15.7
```