For AI agents: a markdown representation of this page is available at https://container-registry.com/docs/2.16/release-notes/release-notes-v2.16.0-dev/index.md. The site index is at https://container-registry.com/llms.txt.
Skip to content
Searching...
No results found for "
Try different keywords or check your spelling.
Release notes v2.16.0 (dev) Compare with v2.15.0 .
Features ci: Add Zero CVE Pipeline (#359 )lint: Add Go Quality Linters (#325 )Bug Fixes Address upstream sync review feedback Address Upstream Sync Review Feedback Address Upstream Sync Review Feedback Bound Proxy-Cache Background Goroutines To Prevent Leak (#257 ) build: Stamp version metadata into trivy-adapter and Trivy binaries (#459 )Cache the Scannability Lookups Per Artifact-List Request (#212 ) cache: Defer Cache Eviction Until After Commit And Make Retry Context-Aware (#300 )cache: replace keyMutex with singleflight and avoid canceling cache Save (upstream #23336 ) (#277 )constrain /registries/ping to saved registry settings (#398 ) core: Prevent Core FD/Goroutine Leak When Registry Is Unresponsive (#254 )core: Reduce auth-failure log noise and skip basic auth for non-admin in OIDC/LDAP/UAA (#313 )Correct grammar and capitalization inconsistencies across Go source files and docs deps: Bump Harbor Scanner Trivy To v0.38.1 (#415 )deps: Resolve Non-UI CVEs (#374 )Install gh CLI in release workflow Invalid UTF-8 Input Should not Cause HTTP 500 Errors (#321 ) ldap: Use custom orm.ReadOrCreate to prevent LDAP login failure (#323 )max_upstream_conn validation bugs nil deref in StopScanArtifact scan type param Point More Info Link to 8GCR (#293 ) Preserve categorized release notes (#215 ) propagate CSV marshal error in scan data export Push Trivy Adapter Images Without Harbor Prefix (#227 ) release: Track Next Development Version On Main (#360 )Resolve Upstream Sync Review Inconsistencies Restore 0171 Migration For Upstream 2.14.x Upgrade Path (#292 ) Restore Buildable Trivy Adapter Pin Restore Dev Up With Rootless Podman (#401 ) Return 404 For Missing Repository Artifacts (#322 ) scan: Keep SBOM accessory push on the local registry when CORE_URL has no port (#465 )security: avoid audit event panic on nil user data (#402 )ui: remove hardcoded SBOM permission override, closes #23218 Update release-please-config-maintenance.json core: Avoid eager structured-logger build on demoted auth-failure logs (#317 )Upstream 【fix issue 22865】TCR provider adaptor can’t parse intertional secret ID Add ListReferrers API to registry client and update parseScopes Add UI option to enable proxy cache referrer API bump Go version from 1.25.7 to 1.26.3 Bump trivy to v0.71.1 and trivy adapter to v0.37.1-rc.1 Call /v2/auth/token api to get bearer token for dockerhub adapter chore: update Trivy adapter version to v0.37.1 feat(acr): add artifact to supported resource types feat(gc): use human-readable sizes in GC log messages feat(session): prevent background polling from renewing session TTL Fix issue related to scanner API fix: Add i18n keys and missing translations fix: Bump repository update_time on tag and artifact changes fix: correct max_upstream_conn validation and disabled bindings fix: Disallow Empty robot_name_prefix to prevent OIDC CLI login from being blocked fix: duplicated “by” in beego ORM TableName comments fix: enable chunked blob upload for Azure ACR replication fix: Fix potentional SQLi fix: Fix theoretical timing vulnerability (goharbor/harbor#23433 ) (#378 ) fix: increase access_key column length to 4096 fix: propagate CSV marshal errors in scan data export fix: skip corrupted encrypted config values on decryption failure fix: use validated scan type in StopScanArtifact (#367 ) fix(auditext): add nil guard in manager Create fix(dao): use context-aware methods for database operations in MetaDAO fix(distribution): allow editing instance without credentials fix(ecr): use amazonaws.com.cn domain for AWS China region endpoints fix(gc): redact redis_url_reg from GC extra attrs fix(i18n): localize max upstream connection placeholder fix(portal): remove temporary SBOM permission override fix(scan): use created time from annotations in accessory art fix(security): validate blob-mount source project and reject tokens missing iat fix(ui): Update bindings in Project Policy Config fix(ui): use selected tag for pull command copy Fix/api completeness (goharbor/harbor#23476 ) (#432 ) Harden crypto usage and drop unused SMTP package perf(blob): fix full table scan in unassociation check perf(replication): filter event policies in query refactor(config): centralize registry HTTP client timeout refactor(task): use Redis SET with SPOP for outdate execution status … Replace gopkg.in/yaml.v2 with github.com/goccy/go-yaml Update and improve zh-TW Traditional Chinese locale Update artifact_accessory to add source column to identify accessory update ECR adapter to allow for ecr-public to be mirored Upgrade harbor go.mod OSS packages Code Refactoring task: use Redis SET with SPOP for outdate execution status refresh