1
0
mirror of https://github.com/goharbor/harbor.git synced 2026-10-24 21:59:32 +03:00

Commit Graph

  • 5d19f26259 fix: Harden proxy cache repository filter validation (#23762) Prasanth Baskar 2026-08-25 14:12:14 +05:30
  • 247b23c414 chore(deps): bump the patch-updates group with 3 updates (#23781) dependabot[bot] 2026-08-25 07:55:58 +00:00
  • ff61b6ea45 test: eliminate arbitrary sleep delays in artifact DAO and gtask pool tests (#23778) Norway-02 2026-08-25 11:16:24 +05:30
  • 5505707dd3 (cherry-pick): query robot account to validate proxy session and fix UT (#23780) stonezdj(Daojun Zhang) 2026-08-25 11:34:49 +08:00
  • 8c4007e02c fix(repoproxy): query robot account to validate proxy session and fix ut (#23776) stonezdj(Daojun Zhang) 2026-08-25 02:43:54 +08:00
  • 617cf74492 test(api): enhance stability of test_copy_disability in tag immutability (#23774) fiona-xie 2026-08-24 15:46:01 +08:00
  • cb7464e3df [Backport] test(api): enhance stability of test_copy_disability in tag immutability (#23775) fiona-xie 2026-08-24 14:51:47 +08:00
  • f58e5664ca test: optimize proxy cache filter UI test with dynamic polling mechansim and cleanup local images before pulling (#23754) fiona-xie 2026-08-24 11:01:26 +08:00
  • e8017b17dd fix: align CI with Go 1.26 dependabot/go_modules/src/release-2.14.0/k8s.io/client-go-0.35.3 stonezdj 2026-08-23 05:37:11 +08:00
  • cd77c32586 fix: sync portal lockfile for eslint 10 dependabot/npm_and_yarn/src/portal/release-2.15.0/eslint-10.8.1 stonezdj 2026-08-23 05:21:01 +08:00
  • c50c7ddd6e chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#23760) dependabot[bot] 2026-08-21 05:58:10 +00:00
  • c80df6d63a test: reduce arbitrary sleep delays in core auth and awsecr tests (#23722) Norway-02 2026-08-21 08:22:58 +05:30
  • d93dfb21f4 (cherry-pick) Refine utils function IsLocalPath (#23757) stonezdj(Daojun Zhang) 2026-08-20 17:12:31 +08:00
  • dee0e1f279 chore(deps): revert github.com/gorilla/csrf to v1.7.2 (#23759) stonezdj(Daojun Zhang) 2026-08-20 17:00:39 +08:00
  • 7afd74a1d8 Refine utils function IsLocalPath (#23756) stonezdj(Daojun Zhang) 2026-08-20 16:13:39 +08:00
  • ca09bdf586 (cherry-pick) add size limit for audit log payload (#23758) stonezdj(Daojun Zhang) 2026-08-20 16:07:47 +08:00
  • 2fbbf4c5cf add size limit for audit log payload (#23755) stonezdj(Daojun Zhang) 2026-08-20 15:17:51 +08:00
  • 6ace938afe chore(deps): update go.mod dependencies to patch versions (#23751) stonezdj(Daojun Zhang) 2026-08-19 17:21:00 +08:00
  • c9a6c6cb37 chore(deps-dev): bump stylelint from 14.16.1 to 17.14.1 in /src/portal (#23741) dependabot[bot] 2026-08-19 11:18:22 +08:00
  • 837866a45a test: add api and ui integration tests for proxy cache repository filter (#23744) fiona-xie 2026-08-18 14:31:14 +08:00
  • 34f9f7393a chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.2.0 (#23746) dependabot[bot] 2026-08-18 13:51:38 +08:00
  • bc00ea63d9 chore(deps): bump the patch-updates group with 3 updates (#23745) dependabot[bot] 2026-08-17 11:59:48 +00:00
  • ee315015ad test: add API test for signature inheritance on OCI index children (#23707) Ikram ALOUI 2026-08-17 08:50:41 +02:00
  • 7b2fd08cc5 chore(deps): bump softprops/action-gh-release from 2 to 3 (#23509) dependabot[bot] 2026-08-15 14:40:05 +00:00
  • 3226ed14c5 chore(deps): bump actions/stale from 10.0.0 to 11.0.0 (#22852) dependabot[bot] 2026-08-14 16:48:03 +00:00
  • cce1901e90 docs: switch security reporting to GitHub private vulnerability reporting (#23559) Vadim Bauer 2026-08-14 16:56:29 +02:00
  • 8cadc124cb chore(deps-dev): bump eslint from 9.39.4 to 10.8.1 in /src/portal dependabot[bot] 2026-08-14 10:49:51 +00:00
  • a7745aad46 chore(deps): bump Angular packages to fix known vulnerabilities (#23724) Prasanth Baskar 2026-08-14 16:11:51 +05:30
  • 24a00ec8df chore(deps): bump the patch-updates group across 1 directory with 3 updates (#23728) dependabot[bot] 2026-08-14 10:06:15 +00:00
  • 613a1cba90 chore(deps): bump Angular packages to fix known vulnerabilities bump-vulnerable-angular-deps Prasanth Baskar 2026-08-13 16:28:07 +05:30
  • ed6574329e chore(deps): bump remaining vulnerable npm dependencies (#23725) Prasanth Baskar 2026-08-14 15:13:17 +05:30
  • 6b5f564ec4 Merge branch 'main' into bump-vulnerable-npm-deps bump-vulnerable-npm-deps Prasanth Baskar 2026-08-14 14:33:16 +05:30
  • 22efe2ec9b chore(ci): update dependabot configuration for release 2.15 (#23723) stonezdj(Daojun Zhang) 2026-08-14 11:22:23 +08:00
  • 102ba3a0f6 chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0 (#23726) dependabot[bot] 2026-08-13 15:57:05 +00:00
  • 62be851176 Merge branch 'main' into bump-vulnerable-npm-deps Prasanth Baskar 2026-08-13 20:46:42 +05:30
  • eafdb2ce8c chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 (#23727) dependabot[bot] 2026-08-13 20:43:16 +05:30
  • 5660775e56 chore(deps): bump remaining vulnerable npm dependencies Prasanth Baskar 2026-08-13 16:31:08 +05:30
  • 2ab05f595c chore(deps): bump Go modules to fix known vulnerabilities (#23720) Prasanth Baskar 2026-08-13 13:45:13 +05:30
  • ede1a52784 chore(deps): bump Go modules to fix known vulnerabilities bump-vulnerable-go-deps Prasanth Baskar 2026-08-13 13:03:16 +05:30
  • 7c5264fbde (cherry-pick) fix: convert setup_timestamp, status_revision, and revision columns to bigint to avoid Y2K38 overflow (#23711) (#23719) stonezdj(Daojun Zhang) 2026-08-13 15:26:07 +08:00
  • b9b2e8c717 fix: convert setup_timestamp, status_revision, and revision columns to bigint to avoid Y2K38 overflow (#23711) (#23718) stonezdj(Daojun Zhang) 2026-08-13 14:44:47 +08:00
  • 5a9a3eceb4 ci: pin GitHub Actions to full commit SHAs (#23712) Prasanth Baskar 2026-08-13 10:43:09 +05:30
  • 544d4e49ec ci: pin GitHub Actions to full commit SHAs ci/pin-actions-to-sha Prasanth Baskar 2026-08-12 13:35:50 +05:30
  • 7709557123 fix(registry): Refactor registry update handling to improve URL validation (#23671) jUDASmILE 2026-08-13 11:18:10 +08:00
  • 18a185ec09 chore(deps): bump actions/cache from 4 to 6 (#23705) dependabot[bot] 2026-08-12 15:08:21 +00:00
  • ce0af7865b fix(ci): remove contents read permission from label check workflow (#23702) stonezdj(Daojun Zhang) 2026-08-12 22:23:19 +08:00
  • 020ac1d911 (cherry-pick): add explicit permissions block to workflows (#23694) stonezdj(Daojun Zhang) 2026-08-12 22:20:08 +08:00
  • 5bf696d533 feat: Add bupd to auto-assignees list (#23716) Prasanth Baskar 2026-08-12 18:53:26 +05:30
  • da03c8fa34 feat: Add bupd to auto-assignees list bupd-assignee Prasanth Baskar 2026-08-12 17:04:02 +05:30
  • f73399d954 (cherry-pick) Exclude replication from dockerhub in github action (#23715) stonezdj(Daojun Zhang) 2026-08-12 17:50:24 +08:00
  • 8631803093 fix: Add \n to the escape pattern (#23697) stonezdj(Daojun Zhang) 2026-08-12 17:48:53 +08:00
  • 11a9a0c45b Exclude replication from dockerhub in github action (#23713) stonezdj(Daojun Zhang) 2026-08-12 17:06:02 +08:00
  • 9017a8d4de test(orm): Cover the AfterCommit ordering contract, not the sink internals Vadim Bauer 2026-08-11 15:15:29 +02:00
  • 0453a74bd0 docs(orm): Say registration is restricted, not ownership Vadim Bauer 2026-08-11 15:11:23 +02:00
  • b86a069d78 docs(orm): Clarify which contexts AfterCommit accepts Vadim Bauer 2026-08-11 15:10:05 +02:00
  • f694a3990c docs(orm): Tighten the AfterCommit context-lifetime wording Vadim Bauer 2026-08-11 15:07:55 +02:00
  • 30fcd25ae1 revert(orm): Drop retained-context forwarding and the firing loop Vadim Bauer 2026-08-11 14:43:49 +02:00
  • 3a8f0d4b0f fix(orm): Run late AfterCommit registrations through the firing loop Vadim Bauer 2026-08-11 14:22:42 +02:00
  • 09fe4e3fc1 fix(orm): Forward AfterCommit registrations from an ended scope Vadim Bauer 2026-08-11 13:54:11 +02:00
  • 7a9d8545d7 fix(orm): Scope AfterCommit hooks to their transaction scope Vadim Bauer 2026-08-11 13:40:24 +02:00
  • 7e0219bcd8 chore(deps): bump actions/setup-go from 5 to 7 (#23698) dependabot[bot] 2026-08-11 18:29:30 +08:00
  • 95059cfaa7 (cherry-pick): prevent proxy-cache poisoning via robot-name prefix (#23695) stonezdj(Daojun Zhang) 2026-08-11 13:24:21 +08:00
  • ff436cb439 (cherry-pick) neutralize CSV formula in scan export (#23696) stonezdj(Daojun Zhang) 2026-08-11 13:23:59 +08:00
  • 9ac1aa28c6 test: accelerate flaky tests by removing time.Sleep (#23692) Norway-02 2026-08-10 16:40:56 +05:30
  • 9bd9287b3e fix: Add missing validation when creating a rb account (#23691) Yannick Müller 2026-08-10 10:12:49 +02:00
  • c3ec2b133e fix: implement signature inheritance for OCI index children (#23540) Ikram ALOUI 2026-08-10 09:15:45 +02:00
  • 2f7addaf2a fix(ci): add explicit permissions block to workflows (#23676) jUDASmILE 2026-08-10 14:32:57 +08:00
  • e25ac180b1 ci: remove third-party docker action (#23693) stonezdj(Daojun Zhang) 2026-08-10 14:25:38 +08:00
  • bdc6df3f34 fix: neutralize CSV formula in scan export (#23677) stonezdj(Daojun Zhang) 2026-08-10 13:22:13 +08:00
  • 00c8a1cdf7 ci: replace third-party docker action (#23683) stonezdj(Daojun Zhang) 2026-08-10 12:09:17 +08:00
  • 934ba4c60d chore(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.3 (#23563) dependabot[bot] 2026-08-07 13:48:00 +00:00
  • c080060316 fix(repoproxy): prevent proxy-cache poisoning via robot-name prefix (#23675) jUDASmILE 2026-08-07 16:29:27 +08:00
  • 7d0a861621 fix: Prevent 500 on invalid query input for robot accounts (#23670) Yannick Müller 2026-08-07 09:34:00 +02:00
  • 266aad1eca feat(backend): implement proxy cache repository filter API (#23527) stonezdj(Daojun Zhang) 2026-08-07 14:20:05 +08:00
  • 95ed8f0eda fix: convert robot account ID columns and sequence to bigint (#23633) Wang Yan 2026-08-06 16:53:06 +08:00
  • 907173f70f feat(ui): support advanced proxy cache configurations in UI (#23536) stonezdj(Daojun Zhang) 2026-08-06 13:15:57 +08:00
  • 6e827641a6 Prevent 500 if no project members have been provided (#23642) Yannick Müller 2026-08-06 08:20:19 +08:00
  • b5b1e2c146 (cherry-pick)ci: pin docker-practice/actions-setup-docker to a full commit SHA (#23554) (#23667) stonezdj(Daojun Zhang) 2026-08-05 16:43:04 +08:00
  • 5551f0963c ci: pin docker-practice/actions-setup-docker to a full commit SHA (#23554) Kobi Hikri 2026-08-05 09:15:56 +03:00
  • 93de6ff8f6 Refactor manifest abstraction into a registry (#23647) Vadim Bauer 2026-08-05 06:19:17 +02:00
  • b2d9858691 Proxy the referrer API to upstream registry with paging and local merge (#23237) stonezdj(Daojun Zhang) 2026-08-04 19:45:55 +08:00
  • 3fc70d0178 fix: Prevent redis pw exposure in error logs (#23657) Yannick Müller 2026-08-04 17:58:44 +08:00
  • da420bcad0 lowercase value of metric enable when migrate from old to new version (#22580) Hoai-Thu Vuong 2026-08-04 13:20:27 +07:00
  • 1cd644ca39 fix: fix tags column text truncation and count badge overlap (#23607) Shijun Sun 2026-08-03 18:21:39 +08:00
  • 70288fa699 fix: allow resizing of the SBOM column in artifact table (#23646) La1itchauhan 2026-08-03 15:06:43 +05:30
  • f7c9eda10d Add proxy cache hit/miss metrics (#23578) Jason-Lee3 2026-08-02 23:00:23 -07:00
  • c2c27ed2d6 fix: set MaxIdleConnsPerHost on internal HTTP transports (#23591) Chlins Zhang 2026-07-31 15:32:46 +08:00
  • 2020f8d066 fix: use errors.Is for sentinel error checks in usergroup controller (#23636) Norway-02 2026-07-30 14:23:41 +05:30
  • f131baa7cb Fix: member audit log resolution after transaction commit (#23586) Ibone González Mauraza 2026-07-29 11:07:55 +02:00
  • 2637bb964b fix: use LEFT JOIN in projectBasicSQL to include projects without quota records (#23520) cdarninsuang-bamfunds 2026-07-28 12:19:07 +01:00
  • 37b5836003 refactor: replace deprecated golang.org/x/net/context (#23630) Norway-02 2026-07-28 12:32:49 +05:30
  • 5b62d30195 refactor: remove deprecated io/ioutil usage (#23611) Norway-02 2026-07-28 11:48:25 +05:30
  • 63bacfba22 chore(deps): bump uuid and webpack-dev-server in /src/portal/app-swagger-ui (#23631) dependabot[bot] 2026-07-28 12:56:52 +08:00
  • 89dbf8fbf7 fix: validate max_upstream_conn values on the backend (#22678) Anurag Ojha 2026-07-24 15:09:17 +05:30
  • 5713e11f94 fix(cnai-parser): enforce actual byte limit to prevent decompression (#23497) Chlins Zhang 2026-07-22 15:40:10 +08:00
  • c9e825a5e6 fix(core): Set blob response headers before streaming the body (#23374) shrenikgala 2026-07-21 23:04:27 -07:00
  • 691eb2fe36 fix: guard against division by zero when merging scan report summaries (#23572) Norway-02 2026-07-17 13:10:50 +05:30
  • 61cc4bbab3 fix: address unsafe type assertions causing potential panics across packages (#23571) Norway-02 2026-07-17 12:10:41 +05:30
  • a0bacace64 test: add UI e2e test for per-endpoint CA certificate setting (#23556) Aditya 2026-07-16 15:05:23 +05:30
  • d7ca84a200 fix(replication): fix incorrect error propagation in getAccessoryArts (#23569) jUDASmILE 2026-07-16 16:48:47 +08:00