goharbor/harbor v2.14.0 Release Notes

Published at: 2025-09-17T06:02:05Z

What’s Changed

Exciting New Features 🎉

Enhanced Proxy-cache

Syncs state with the upstream registry by deleting local cache when artifacts are removed; Serves the local manifest if its digest matches the upstream registry

Add manifestcache push for tag and digest to local repository by @raphaelzoellner in https://github.com/goharbor/harbor/pull/21141
Delete local cache if the artifact doesn’t exist in upstream registry by @stonezdj in https://github.com/goharbor/harbor/pull/22175

Single Active Replication

Adds an option to enforce single active replication, preventing parallel runs under the same policy. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/single-active-replication.md

feat: Single Active Replication by @bupd in https://github.com/goharbor/harbor/pull/21347

Enhanced artifact scanning

Adds support for fixVersion in CVE reports; Skips vulnerability checks for non-scannable artifacts.

Add status of CVEs to artfact scan report by @reasonerjt in https://github.com/goharbor/harbor/pull/22177

Enhanced garbage collection

Displays GC progress while running

Display gc progress information in running state by @stonezdj in https://github.com/goharbor/harbor/pull/21974

Enhanced CNAI Model integration

Adds support for raw CNAI model format. For more details, please refer to the model spec.

feat: support raw format for CNAI model by @chlins in https://github.com/goharbor/harbor/pull/22040

Component updates ⬆️

feat: support customize the job execution retention count by env by @chlins in https://github.com/goharbor/harbor/pull/22129
Add Russian language support by @sergey-akhmineev in https://github.com/goharbor/harbor/pull/21083
bump base version for v2.14 by @wy65701436 in https://github.com/goharbor/harbor/pull/21819
Update dependencies in Harbor UI by @bupd in https://github.com/goharbor/harbor/pull/21823
fix: support preheat cnai model artifact by @chlins in https://github.com/goharbor/harbor/pull/21849
fix jobservice container loglevel consistent with job_log by @MinerYang in https://github.com/goharbor/harbor/pull/21874
update artifact info by @stonezdj in https://github.com/goharbor/harbor/pull/21902
fix: check blob exist before copying layers samller than chunk size by @liubin in https://github.com/goharbor/harbor/pull/21883
revise make file for lint api by @wy65701436 in https://github.com/goharbor/harbor/pull/21906
Remove the error check never happen by @stonezdj in https://github.com/goharbor/harbor/pull/21916
enhance the query judgement by @wy65701436 in https://github.com/goharbor/harbor/pull/21924
FIX: Display ‘No SBOM’ in multi-arch images in HarborUI by @bupd in https://github.com/goharbor/harbor/pull/21459
Update the severity, fixed version and cvss_score_v3 by @stonezdj in https://github.com/goharbor/harbor/pull/21915
unify the golang image version by @wy65701436 in https://github.com/goharbor/harbor/pull/21935
Generate URI of token service via Host in request by @reasonerjt in https://github.com/goharbor/harbor/pull/21898
refactor: replace interface{} to any by @chlins in https://github.com/goharbor/harbor/pull/21973
Fix: Helm Chart Copy Button in UI by @bupd in https://github.com/goharbor/harbor/pull/21969
add build flag for harbor exporter by @wy65701436 in https://github.com/goharbor/harbor/pull/21988
update robot permission table by @wy65701436 in https://github.com/goharbor/harbor/pull/21989
bump up golang version to v1.24.3 by @wy65701436 in https://github.com/goharbor/harbor/pull/21993
increase docker client timeout for robot case by @MinerYang in https://github.com/goharbor/harbor/pull/21994
Test update for adding nil value to list by @miledxz in https://github.com/goharbor/harbor/pull/21990
chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.84 to 1.63.107 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/21943
feat: add rate limiter for alibaba cloud acr adapter by @njucjc in https://github.com/goharbor/harbor/pull/21953
chore(deps): bump k8s.io/client-go from 0.32.2 to 0.33.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22011
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.185 to 1.1.10 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22035
chore: fix the arguments for codecov v5 by @chlins in https://github.com/goharbor/harbor/pull/22050
Refactor: Simplify SearchAndOnBoardGroup Logic by @bupd in https://github.com/goharbor/harbor/pull/22058
Remove document link from Image Scanner by @stonezdj in https://github.com/goharbor/harbor/pull/22064
chore(deps): bump helm.sh/helm/v3 from 3.17.2 to 3.18.2 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22060
fix: CVE Allowlist Validation by @bupd in https://github.com/goharbor/harbor/pull/22077
refactor: simplify some implementations by modern go features by @chlins in https://github.com/goharbor/harbor/pull/21998
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.11 to 1.1.17 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22089
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.17 to 1.1.19 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22133
add dockernetwork parameter for build process by @MinerYang in https://github.com/goharbor/harbor/pull/22138
add BUILD_INSTALLER parameter for optionally build prepare and log container by @MinerYang in https://github.com/goharbor/harbor/pull/22148
lazy load v2_swagger_client module by @MinerYang in https://github.com/goharbor/harbor/pull/22154
Fix: Audit Log Eventtype antipattern in System Settings UI by @bupd in https://github.com/goharbor/harbor/pull/22147
Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject by @yuzp1996 in https://github.com/goharbor/harbor/pull/22165
Update FixVersion and ScoreV3 by @strigazi in https://github.com/goharbor/harbor/pull/22007
Set MAX_JOB_DURATION_SECONDS from jobservice config.yml by @stonezdj in https://github.com/goharbor/harbor/pull/22116
clean up project metadata for tag retention policy after deletion by @MinerYang in https://github.com/goharbor/harbor/pull/22174
chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22113
chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22188
Don’t always skip vuln check when artifact is not scannable by @reasonerjt in https://github.com/goharbor/harbor/pull/22187
add the replicaiton adapter whitelist by @wy65701436 in https://github.com/goharbor/harbor/pull/22198
fix: correct the permission of project maintainer role for webhook policy by @chlins in https://github.com/goharbor/harbor/pull/22135
update the orm filter func by @wy65701436 in https://github.com/goharbor/harbor/pull/22208
bump golang version by @wy65701436 in https://github.com/goharbor/harbor/pull/22205
Add HTTP 409 error when creating robot account by @stonezdj in https://github.com/goharbor/harbor/pull/22201
The tag retention job failed with 403 error message by @stonezdj in https://github.com/goharbor/harbor/pull/22159
remove extra build_base=false && pull_base_from_dockerhub=false check logic by @MinerYang in https://github.com/goharbor/harbor/pull/22233
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22225
bump go version by @wy65701436 in https://github.com/goharbor/harbor/pull/22238
bump base verson for v2.15.0 by @wy65701436 in https://github.com/goharbor/harbor/pull/22241
build base images by @wy65701436 in https://github.com/goharbor/harbor/pull/22249
add prepare migration script for 2.14.0 by @MinerYang in https://github.com/goharbor/harbor/pull/22247
chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22258
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22244
Refine the sql to query non empty repositories by @stonezdj in https://github.com/goharbor/harbor/pull/22269
chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22282
chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22283
chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22281
chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22243
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22284
build base for v2.14.0 by @wy65701436 in https://github.com/goharbor/harbor/pull/22299
bump base images for v2.14.0-rc2 by @wy65701436 in https://github.com/goharbor/harbor/pull/22334
build base for rc2 by @wy65701436 in https://github.com/goharbor/harbor/pull/22341

Docs update 🗄️

README.md: add artifact hub badge by @mohamedawnallah in https://github.com/goharbor/harbor/pull/20736
Update contributing.md by @chethanm99 in https://github.com/goharbor/harbor/pull/22082
Update Swagger ’s readme.md by @chethanm99 in https://github.com/goharbor/harbor/pull/22087
Update CHANGELOG.md, RELEASES.md and ROADMAP.md by @chethanm99 in https://github.com/goharbor/harbor/pull/22095
Improve portal README.md formatting and clarity by @rgcr in https://github.com/goharbor/harbor/pull/22173
chore: Updated RELEASE.md by updating Minor Release Support Map by @mooneeb in https://github.com/goharbor/harbor/pull/22145

Other Changes

Update robot testcase related to security hub row count to 15 by default by @stonezdj in https://github.com/goharbor/harbor/pull/21846
update gitaction machine to 22.04 by @wy65701436 in https://github.com/goharbor/harbor/pull/21900
Add missing step in e2e pipeline setup by @bupd in https://github.com/goharbor/harbor/pull/21888
change python ./setup.py install to pip install . because deprecated by @stonezdj in https://github.com/goharbor/harbor/pull/21952
udpate storage to s3 by @wy65701436 in https://github.com/goharbor/harbor/pull/21999
chore(deps): bump aws-actions/configure-aws-credentials from 4.1.0 to 4.2.1 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22003
Add environment variable add network_type env by @stonezdj in https://github.com/goharbor/harbor/pull/22097
change the pass-CI rules to exclude the resources and robot-cases folder by @stonezdj in https://github.com/goharbor/harbor/pull/22121
Remove testcase Open Image Scanners doc page by @stonezdj in https://github.com/goharbor/harbor/pull/22180
Display download url for BUILD_PACKAGE action by @stonezdj in https://github.com/goharbor/harbor/pull/22197
Upload build logs to github artifact by @stonezdj in https://github.com/goharbor/harbor/pull/22223
chore(deps): bump actions/checkout from 3 to 5 by @dependabot[bot] in https://github.com/goharbor/harbor/pull/22250
Adjust the xpath to find the package column in testcase by @stonezdj in https://github.com/goharbor/harbor/pull/22292
Remove gitlab replication by @stonezdj in https://github.com/goharbor/harbor/pull/22298
(cherry-pick) Remove port 9443 from harbor IP for webhook event check by @stonezdj in https://github.com/goharbor/harbor/pull/22331
(cherry-pick) Remove GCR replication because GCR account is removed by @stonezdj in https://github.com/goharbor/harbor/pull/22332

New Contributors

@raphaelzoellner made their first contribution in https://github.com/goharbor/harbor/pull/21141
@miledxz made their first contribution in https://github.com/goharbor/harbor/pull/21990
@chethanm99 made their first contribution in https://github.com/goharbor/harbor/pull/22082
@sergey-akhmineev made their first contribution in https://github.com/goharbor/harbor/pull/21083
@strigazi made their first contribution in https://github.com/goharbor/harbor/pull/22007
@rgcr made their first contribution in https://github.com/goharbor/harbor/pull/22173
@mooneeb made their first contribution in https://github.com/goharbor/harbor/pull/22145

Full Changelog: https://github.com/goharbor/harbor/compare/v2.13.0...v2.14.0

Harbor V2.14.0 Rc2 Release Note