v2.14.1

What's Changed

Exciting New Features 🎉

• (cherry-pick) Add max_upstream_conn parameter for each proxy_cache project (#22348) by @stonezdj in #22409
• (cherry-pick) Add UI for limit upstream registry connection by @stonezdj in #22410

Component updates ⬆️

• [cherry-pick] fix robot issue-21406 by @wy65701436 in #22394
• [cherry-pick] Allow disable audit log to DB when initialize by @wy65701436 in #22469
• [cherry-pick] add migraiton sql for skip_audit_log_database by @wy65701436 in #22489
• [cherry-pick]refactor the logic to init skip_audit_log_database by @wy65701436 in #22496
• Bump up trivy and trivy-adapter for v2.14.1 by @reasonerjt in #22501
• bump go version for v2.14.1 by @wy65701436 in #22499
• bump base images for v2.14.1 by @wy65701436 in #22506
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.3.0 in /src by @dependabot[bot] in #22518
• chore(deps): bump k8s.io/client-go from 0.33.3 to 0.34.1 in /src by @dependabot[bot] in #22515
• Revert to older version of trivy adapter by @reasonerjt in #22541
• bump base and go for 2.14.1 by @wy65701436 in #22550
• bump base version for v2.14.1 by @wy65701436 in #22552
• update go version claim by @wy65701436 in #22564
• bump base photon image for v2.14.1 by @wy65701436 in #22576

Full Changelog: v2.14.0...v2.14.1

v2.14.1-rc2

What's Changed

Exciting New Features 🎉

• (cherry-pick) Add max_upstream_conn parameter for each proxy_cache project (#22348) by @stonezdj in #22409
• (cherry-pick) Add UI for limit upstream registry connection by @stonezdj in #22410

Component updates ⬆️

• [cherry-pick] fix robot issue-21406 by @wy65701436 in #22394
• [cherry-pick] Allow disable audit log to DB when initialize by @wy65701436 in #22469
• [cherry-pick] add migraiton sql for skip_audit_log_database by @wy65701436 in #22489
• [cherry-pick]refactor the logic to init skip_audit_log_database by @wy65701436 in #22496
• Bump up trivy and trivy-adapter for v2.14.1 by @reasonerjt in #22501
• bump go version for v2.14.1 by @wy65701436 in #22499
• bump base images for v2.14.1 by @wy65701436 in #22506
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.3.0 in /src by @dependabot[bot] in #22518
• chore(deps): bump k8s.io/client-go from 0.33.3 to 0.34.1 in /src by @dependabot[bot] in #22515
• Revert to older version of trivy adapter by @reasonerjt in #22541
• bump base and go for 2.14.1 by @wy65701436 in #22550
• bump base version for v2.14.1 by @wy65701436 in #22552
• update go version claim by @wy65701436 in #22564
• bump base photon image for v2.14.1 by @wy65701436 in #22576

Full Changelog: v2.14.0...v2.14.1-rc2

v2.13.3

What's Changed

Component updates ⬆️

• [cherry-pick]update pipenv and lock on release-2.13.0 by @MinerYang in #22477
• [cherry-pick]add dockernetwork parameter on release-2.13.0 by @MinerYang in #22478
• [cherry-pick] remove extra build_base check logic on release-2.13.0 by @MinerYang in #22475
• [cherry-pick]Make offline installer optional on release 2.13.0 by @MinerYang in #22476
• Fix other build gaps in release-2.13.0 by @MinerYang in #22485
• update pip install for make swagger_client on release-2.13.0 by @MinerYang in #22486
• Bump up trivy and trivy adapter for v2.13.3 by @reasonerjt in #22500
• bump go module dependency on release-2.13.0 by @MinerYang in #22502
• bump base and go for v2.13.3 by @wy65701436 in #22549
• bump base version for v2.13.3 by @wy65701436 in #22551
• update go version claim by @wy65701436 in #22562
• bump base photon image for v2.13.3 by @wy65701436 in #22575

Other Changes

• (cherry-pick) Upload log files to github with 5 day retention by @stonezdj in #22253
• (cherry-pick) Remove port 9443 from harbor IP for webhook event check by @stonezdj in #22559
• (cherry-pick) Remove gitlab replication by @stonezdj in #22560
• (cherry-pick) Remove GCR replication because GCR account is removed by @stonezdj in #22561

Full Changelog: v2.13.2...v2.13.3

v2.13.3-rc2

What's Changed

Component updates ⬆️

• [cherry-pick]update pipenv and lock on release-2.13.0 by @MinerYang in #22477
• [cherry-pick]add dockernetwork parameter on release-2.13.0 by @MinerYang in #22478
• [cherry-pick] remove extra build_base check logic on release-2.13.0 by @MinerYang in #22475
• [cherry-pick]Make offline installer optional on release 2.13.0 by @MinerYang in #22476
• Fix other build gaps in release-2.13.0 by @MinerYang in #22485
• update pip install for make swagger_client on release-2.13.0 by @MinerYang in #22486
• Bump up trivy and trivy adapter for v2.13.3 by @reasonerjt in #22500
• bump go module dependency on release-2.13.0 by @MinerYang in #22502
• bump base and go for v2.13.3 by @wy65701436 in #22549
• bump base version for v2.13.3 by @wy65701436 in #22551
• update go version claim by @wy65701436 in #22562
• bump base photon image for v2.13.3 by @wy65701436 in #22575

Other Changes

• (cherry-pick) Upload log files to github with 5 day retention by @stonezdj in #22253
• (cherry-pick) Remove port 9443 from harbor IP for webhook event check by @stonezdj in #22559
• (cherry-pick) Remove gitlab replication by @stonezdj in #22560
• (cherry-pick) Remove GCR replication because GCR account is removed by @stonezdj in #22561

Full Changelog: v2.13.2...v2.13.3-rc2

v2.14.1-rc1

What's Changed

Exciting New Features 🎉

• (cherry-pick) Add max_upstream_conn parameter for each proxy_cache project (#22348) by @stonezdj in #22409
• (cherry-pick) Add UI for limit upstream registry connection by @stonezdj in #22410

Component updates ⬆️

• [cherry-pick] fix robot issue-21406 by @wy65701436 in #22394
• [cherry-pick] Allow disable audit log to DB when initialize by @wy65701436 in #22469
• [cherry-pick] add migraiton sql for skip_audit_log_database by @wy65701436 in #22489
• [cherry-pick]refactor the logic to init skip_audit_log_database by @wy65701436 in #22496
• Bump up trivy and trivy-adapter for v2.14.1 by @reasonerjt in #22501
• bump go version for v2.14.1 by @wy65701436 in #22499
• bump base images for v2.14.1 by @wy65701436 in #22506
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.3.0 in /src by @dependabot[bot] in #22518
• chore(deps): bump k8s.io/client-go from 0.33.3 to 0.34.1 in /src by @dependabot[bot] in #22515
• Revert to older version of trivy adapter by @reasonerjt in #22541
• bump base and go for 2.14.1 by @wy65701436 in #22550
• bump base version for v2.14.1 by @wy65701436 in #22552

Full Changelog: v2.14.0...v2.14.1-rc1

v2.13.3-rc1

What's Changed

Component updates ⬆️

• [cherry-pick]update pipenv and lock on release-2.13.0 by @MinerYang in #22477
• [cherry-pick]add dockernetwork parameter on release-2.13.0 by @MinerYang in #22478
• [cherry-pick] remove extra build_base check logic on release-2.13.0 by @MinerYang in #22475
• [cherry-pick]Make offline installer optional on release 2.13.0 by @MinerYang in #22476
• Fix other build gaps in release-2.13.0 by @MinerYang in #22485
• update pip install for make swagger_client on release-2.13.0 by @MinerYang in #22486
• Bump up trivy and trivy adapter for v2.13.3 by @reasonerjt in #22500
• bump go module dependency on release-2.13.0 by @MinerYang in #22502
• bump base and go for v2.13.3 by @wy65701436 in #22549
• bump base version for v2.13.3 by @wy65701436 in #22551

Other Changes

• (cherry-pick) Upload log files to github with 5 day retention by @stonezdj in #22253

Full Changelog: v2.13.2...v2.13.3-rc1

v2.14.0

What's Changed

Exciting New Features 🎉

Enhanced Proxy-cache

Syncs state with the upstream registry by deleting local cache when artifacts are removed; Serves the local manifest if its digest matches the upstream registry

• Add manifestcache push for tag and digest to local repository by @raphaelzoellner in #21141
• Delete local cache if the artifact doesn't exist in upstream registry by @stonezdj in #22175

Single Active Replication

Adds an option to enforce single active replication, preventing parallel runs under the same policy. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/single-active-replication.md

• feat: Single Active Replication by @bupd in #21347

Enhanced artifact scanning

Adds support for fixVersion in CVE reports; Skips vulnerability checks for non-scannable artifacts.

• Add status of CVEs to artfact scan report by @reasonerjt in #22177

Enhanced garbage collection

Displays GC progress while running

• Display gc progress information in running state by @stonezdj in #21974

Enhanced CNAI Model integration

Adds support for raw CNAI model format. For more details, please refer to the model spec.

• feat: support raw format for CNAI model by @chlins in #22040

Breaking Changes 🛠

• the replication adapter whitelist has been introduced to control the to define the list of actively supported adapters @wy65701436 in #22198

Component updates ⬆️

• feat: support customize the job execution retention count by env by @chlins in #22129
• Add Russian language support by @sergey-akhmineev in #21083
• bump base version for v2.14 by @wy65701436 in #21819
• Update dependencies in Harbor UI by @bupd in #21823
• fix: support preheat cnai model artifact by @chlins in #21849
• fix jobservice container loglevel consistent with job_log by @MinerYang in #21874
• update artifact info by @stonezdj in #21902
• fix: check blob exist before copying layers samller than chunk size by @liubin in #21883
• revise make file for lint api by @wy65701436 in #21906
• Remove the error check never happen by @stonezdj in #21916
• enhance the query judgement by @wy65701436 in #21924
• FIX: Display 'No SBOM' in multi-arch images in HarborUI by @bupd in #21459
• Update the severity, fixed version and cvss_score_v3 by @stonezdj in #21915
• unify the golang image version by @wy65701436 in #21935
• Generate URI of token service via Host in request by @reasonerjt in #21898
• refactor: replace interface{} to any by @chlins in #21973
• Fix: Helm Chart Copy Button in UI by @bupd in #21969
• add build flag for harbor exporter by @wy65701436 in #21988
• update robot permission table by @wy65701436 in #21989
• bump up golang version to v1.24.3 by @wy65701436 in #21993
• increase docker client timeout for robot case by @MinerYang in #21994
• Test update for adding nil value to list by @miledxz in #21990
• chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.84 to 1.63.107 in /src by @dependabot[bot] in #21943
• feat: add rate limiter for alibaba cloud acr adapter by @njucjc in #21953
• chore(deps): bump k8s.io/client-go from 0.32.2 to 0.33.1 in /src by @dependabot[bot] in #22011
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.185 to 1.1.10 in /src by @dependabot[bot] in #22035
• chore: fix the arguments for codecov v5 by @chlins in #22050
• Refactor: Simplify SearchAndOnBoardGroup Logic by @bupd in #22058
• Remove document link from Image Scanner by @stonezdj in #22064
• chore(deps): bump helm.sh/helm/v3 from 3.17.2 to 3.18.2 in /src by @dependabot[bot] in #22060
• fix: CVE Allowlist Validation by @bupd in #22077
• refactor: simplify some implementations by modern go features by @chlins in #21998
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.11 to 1.1.17 in /src by @dependabot[bot] in #22089
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.17 to 1.1.19 in /src by @dependabot[bot] in #22133
• add dockernetwork parameter for build process by @MinerYang in #22138
• add BUILD_INSTALLER parameter for optionally build prepare and log container by @MinerYang in #22148
• lazy load v2_swagger_client module by @MinerYang in #22154
• Fix: Audit Log Eventtype antipattern in System Settings UI by @bupd in #22147
• Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject by @yuzp1996 in #22165
• Update FixVersion and ScoreV3 by @strigazi in #22007
• Set MAX_JOB_DURATION_SECONDS from jobservice config.yml by @stonezdj in #22116
• clean up project metadata for tag retention policy after deletion by @MinerYang in #22174
• chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src by @dependabot[bot] in #22113
• chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src by @dependabot[bot] in #22188
• Don't always skip vuln check when artifact is not scannable by @reasonerjt in #22187
• add the replicaiton adapter whitelist by @wy65701436 in #22198
• fix: correct the permission of project maintainer role for webhook policy by @chlins in #22135
• update the orm filter func by @wy65701436 in #22208
• bump golang version by @wy65701436 in #22205
• Add HTTP 409 error when creating robot account by @stonezdj in #22201
• The tag retention job failed with 403 error message by @stonezdj in #22159
• remove extra build_base=false && pull_base_from_dockerhub=false check logic by @MinerYang in #22233
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src by @dependabot[bot] in #22225
• bump go version by @wy65701436 in #22238
• bump base verson for v2.15.0 by @wy65701436 in #22241
• build base images by @wy65701436 in #22249
• add prepare migration script for 2.14.0 by @MinerYang in #22247
• chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src by @dependabot[bot] in #22258
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src by @dependabot[bot] in #22244
• Refine the sql to query non empty repositories by @stonezdj in #22269
• chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src by @dependabot[bot] in #22282
• chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src by @dependabot[bot] in #22283
• chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src by @dependabot[bot] in #22281
• chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src by @dependabot[bot] in #22243
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src by @dependabot[bot] in #22284
• build base for v2.14.0 by @wy65701436 in #22299
• bump base images for v2.14.0-rc2 by @wy65701436 in #22334
• build base for rc2 by @wy65701436 in #22341

Docs update 🗄️

• README.md: add arti...

v2.14.0-rc2

What's Changed

Exciting New Features 🎉

• Display gc progress information in running state by @stonezdj in #21974
• feat: Single Active Replication by @bupd in #21347

Enhancement 🚀

• Add manifestcache push for tag and digest to local repository by @raphaelzoellner in #21141
• feat: support customize the job execution retention count by env by @chlins in #22129
• Add Russian language support by @sergey-akhmineev in #21083
• Add \status\ of CVEs to artfact scan report by @reasonerjt in #22177

Component updates ⬆️

• bump base version for v2.14 by @wy65701436 in #21819
• Update dependencies in Harbor UI by @bupd in #21823
• fix: support preheat cnai model artifact by @chlins in #21849
• fix jobservice container loglevel consistent with job_log by @MinerYang in #21874
• update artifact info by @stonezdj in #21902
• fix: check blob exist before copying layers samller than chunk size by @liubin in #21883
• revise make file for lint api by @wy65701436 in #21906
• Remove the error check never happen by @stonezdj in #21916
• enhance the query judgement by @wy65701436 in #21924
• FIX: Display 'No SBOM' in multi-arch images in HarborUI by @bupd in #21459
• Update the severity, fixed version and cvss_score_v3 by @stonezdj in #21915
• unify the golang image version by @wy65701436 in #21935
• Generate URI of token service via Host in request by @reasonerjt in #21898
• refactor: replace interface{} to any by @chlins in #21973
• Fix: Helm Chart Copy Button in UI by @bupd in #21969
• add build flag for harbor exporter by @wy65701436 in #21988
• update robot permission table by @wy65701436 in #21989
• bump up golang version to v1.24.3 by @wy65701436 in #21993
• increase docker client timeout for robot case by @MinerYang in #21994
• Test update for adding nil value to list by @miledxz in #21990
• chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.84 to 1.63.107 in /src by @dependabot[bot] in #21943
• feat: add rate limiter for alibaba cloud acr adapter by @njucjc in #21953
• chore(deps): bump k8s.io/client-go from 0.32.2 to 0.33.1 in /src by @dependabot[bot] in #22011
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.185 to 1.1.10 in /src by @dependabot[bot] in #22035
• chore: fix the arguments for codecov v5 by @chlins in #22050
• Refactor: Simplify SearchAndOnBoardGroup Logic by @bupd in #22058
• Remove document link from Image Scanner by @stonezdj in #22064
• chore(deps): bump helm.sh/helm/v3 from 3.17.2 to 3.18.2 in /src by @dependabot[bot] in #22060
• fix: CVE Allowlist Validation by @bupd in #22077
• refactor: simplify some implementations by modern go features by @chlins in #21998
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.11 to 1.1.17 in /src by @dependabot[bot] in #22089
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.17 to 1.1.19 in /src by @dependabot[bot] in #22133
• add dockernetwork parameter for build process by @MinerYang in #22138
• add BUILD_INSTALLER parameter for optionally build prepare and log container by @MinerYang in #22148
• lazy load v2_swagger_client module by @MinerYang in #22154
• Fix: Audit Log Eventtype antipattern in System Settings UI by @bupd in #22147
• Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject by @yuzp1996 in #22165
• Update FixVersion and ScoreV3 by @strigazi in #22007
• Set MAX_JOB_DURATION_SECONDS from jobservice config.yml by @stonezdj in #22116
• clean up project metadata for tag retention policy after deletion by @MinerYang in #22174
• chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src by @dependabot[bot] in #22113
• chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src by @dependabot[bot] in #22188
• Don't always skip vuln check when artifact is not scannable by @reasonerjt in #22187
• add the replicaiton adapter whitelist by @wy65701436 in #22198
• fix: correct the permission of project maintainer role for webhook policy by @chlins in #22135
• update the orm filter func by @wy65701436 in #22208
• bump golang version by @wy65701436 in #22205
• Add HTTP 409 error when creating robot account by @stonezdj in #22201
• feat: support raw format for CNAI model by @chlins in #22040
• The tag retention job failed with 403 error message by @stonezdj in #22159
• remove extra build_base=false && pull_base_from_dockerhub=false check logic by @MinerYang in #22233
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src by @dependabot[bot] in #22225
• Delete local cache if the artifact doesn't exist in upstream registry by @stonezdj in #22175
• update the support list of proxy cache by @wy65701436 in #22237
• bump go version by @wy65701436 in #22238
• bump base verson for v2.15.0 by @wy65701436 in #22241
• build base images by @wy65701436 in #22249
• add prepare migration script for 2.14.0 by @MinerYang in #22247
• chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src by @dependabot[bot] in #22258
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src by @dependabot[bot] in #22244
• Refine the sql to query non empty repositories by @stonezdj in #22269
• chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src by @dependabot[bot] in #22282
• chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src by @dependabot[bot] in #22283
• chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src by @dependabot[bot] in #22281
• chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src by @dependabot[bot] in #22243
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src by @dependabot[bot] in #22284
• build base for v2.14.0 by @wy65701436 in #22299
• bump base images for v2.14.0-rc2 by @wy65701436 in #22334
• build base for rc2 by @wy65701436 in #22341

Docs update 🗄️

• README.md: add artifact hub badge by @mohamedawnallah in #20736
• Update contributing.md by @chethanm99 in #22082
• Update Swagger 's readme.md by @chethanm99 in #22087
• Update CHANGELOG.md, RELEASES.md and ROADMAP.md by @chethanm99 in #22095
• Improve portal README.md formatting and clarity by @rgcr in #22173
• chore: Updated RELEASE.md by updating Minor Release Support Map by @mooneeb in #22145

Other Changes

• Update robot testcase related to security hub row count to 15 by default by @stonezdj in #21846
• update gitaction machine to 22.04 by @wy65701436 in #21900
• Add missing step in e2e pipeline setup by @bupd in #21888
• change python ./setup.py install to pip install . ...

v2.14.0-rc1

What's Changed

Exciting New Features 🎉

• Display gc progress information in running state by @stonezdj in #21974
• feat: Single Active Replication by @bupd in #21347

Enhancement 🚀

• Add manifestcache push for tag and digest to local repository by @raphaelzoellner in #21141
• feat: support customize the job execution retention count by env by @chlins in #22129
• Add Russian language support by @sergey-akhmineev in #21083
• Add \status\ of CVEs to artfact scan report by @reasonerjt in #22177

Component updates ⬆️

• bump base version for v2.14 by @wy65701436 in #21819
• Update dependencies in Harbor UI by @bupd in #21823
• fix: support preheat cnai model artifact by @chlins in #21849
• fix jobservice container loglevel consistent with job_log by @MinerYang in #21874
• update artifact info by @stonezdj in #21902
• fix: check blob exist before copying layers samller than chunk size by @liubin in #21883
• revise make file for lint api by @wy65701436 in #21906
• Remove the error check never happen by @stonezdj in #21916
• enhance the query judgement by @wy65701436 in #21924
• FIX: Display 'No SBOM' in multi-arch images in HarborUI by @bupd in #21459
• Update the severity, fixed version and cvss_score_v3 by @stonezdj in #21915
• unify the golang image version by @wy65701436 in #21935
• Generate URI of token service via Host in request by @reasonerjt in #21898
• refactor: replace interface{} to any by @chlins in #21973
• Fix: Helm Chart Copy Button in UI by @bupd in #21969
• add build flag for harbor exporter by @wy65701436 in #21988
• update robot permission table by @wy65701436 in #21989
• bump up golang version to v1.24.3 by @wy65701436 in #21993
• increase docker client timeout for robot case by @MinerYang in #21994
• Test update for adding nil value to list by @miledxz in #21990
• chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.84 to 1.63.107 in /src by @dependabot[bot] in #21943
• feat: add rate limiter for alibaba cloud acr adapter by @njucjc in #21953
• chore(deps): bump k8s.io/client-go from 0.32.2 to 0.33.1 in /src by @dependabot[bot] in #22011
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.185 to 1.1.10 in /src by @dependabot[bot] in #22035
• chore: fix the arguments for codecov v5 by @chlins in #22050
• Refactor: Simplify SearchAndOnBoardGroup Logic by @bupd in #22058
• Remove document link from Image Scanner by @stonezdj in #22064
• chore(deps): bump helm.sh/helm/v3 from 3.17.2 to 3.18.2 in /src by @dependabot[bot] in #22060
• fix: CVE Allowlist Validation by @bupd in #22077
• refactor: simplify some implementations by modern go features by @chlins in #21998
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.11 to 1.1.17 in /src by @dependabot[bot] in #22089
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.17 to 1.1.19 in /src by @dependabot[bot] in #22133
• add dockernetwork parameter for build process by @MinerYang in #22138
• add BUILD_INSTALLER parameter for optionally build prepare and log container by @MinerYang in #22148
• lazy load v2_swagger_client module by @MinerYang in #22154
• Fix: Audit Log Eventtype antipattern in System Settings UI by @bupd in #22147
• Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject by @yuzp1996 in #22165
• Update FixVersion and ScoreV3 by @strigazi in #22007
• Set MAX_JOB_DURATION_SECONDS from jobservice config.yml by @stonezdj in #22116
• clean up project metadata for tag retention policy after deletion by @MinerYang in #22174
• chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src by @dependabot[bot] in #22113
• chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src by @dependabot[bot] in #22188
• Don't always skip vuln check when artifact is not scannable by @reasonerjt in #22187
• add the replicaiton adapter whitelist by @wy65701436 in #22198
• fix: correct the permission of project maintainer role for webhook policy by @chlins in #22135
• update the orm filter func by @wy65701436 in #22208
• bump golang version by @wy65701436 in #22205
• Add HTTP 409 error when creating robot account by @stonezdj in #22201
• feat: support raw format for CNAI model by @chlins in #22040
• The tag retention job failed with 403 error message by @stonezdj in #22159
• remove extra build_base=false && pull_base_from_dockerhub=false check logic by @MinerYang in #22233
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src by @dependabot[bot] in #22225
• Delete local cache if the artifact doesn't exist in upstream registry by @stonezdj in #22175
• update the support list of proxy cache by @wy65701436 in #22237
• bump go version by @wy65701436 in #22238
• bump base verson for v2.15.0 by @wy65701436 in #22241
• build base images by @wy65701436 in #22249
• add prepare migration script for 2.14.0 by @MinerYang in #22247
• chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src by @dependabot[bot] in #22258
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src by @dependabot[bot] in #22244
• Refine the sql to query non empty repositories by @stonezdj in #22269
• chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src by @dependabot[bot] in #22282
• chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src by @dependabot[bot] in #22283
• chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src by @dependabot[bot] in #22281
• chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src by @dependabot[bot] in #22243
• chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src by @dependabot[bot] in #22284
• build base for v2.14.0 by @wy65701436 in #22299

Docs update 🗄️

• README.md: add artifact hub badge by @mohamedawnallah in #20736
• Update contributing.md by @chethanm99 in #22082
• Update Swagger 's readme.md by @chethanm99 in #22087
• Update CHANGELOG.md, RELEASES.md and ROADMAP.md by @chethanm99 in #22095
• Improve portal README.md formatting and clarity by @rgcr in #22173
• chore: Updated RELEASE.md by updating Minor Release Support Map by @mooneeb in #22145

Other Changes

• Update robot testcase related to security hub row count to 15 by default by @stonezdj in #21846
• update gitaction machine to 22.04 by @wy65701436 in #21900
• Add missing step in e2e pipeline setup by @bupd in #21888
• change python ./setup.py install to pip install . because deprecated by @stonezdj in #21952
• udpate storage to s3 by @wy65701436 in #21999
• chore(deps): b...

v2.13.2

What's Changed

Component updates ⬆️

• update go and base image by @wy65701436 in #22186
• bump helm.sh/helm/v3 from 3.17.2 to 3.17.4 by @stonezdj in #22189
• [cherry-pick] update the orm filter func by @wy65701436 in #22209
• bump version to v2.13.2 by @wy65701436 in #22211
• bump golang version by @wy65701436 in #22216
• Bump trivy to v0.64.1 trivy adapter to v0.33.2 by @reasonerjt in #22215

Full Changelog: v2.13.1...v2.13.2