goharbor/harbor Release Notes

v2.13.0-rc1 (2025-04-03)



## What's Changed
### Exciting New Features 🎉

#### Enhanced audit log 🎉
Enhances Harbor's audit logging with more granular tracking of user actions and system events, improving traceability and security. Key changes include detailed log filtering, enhanced API logging, and improved log query performance. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/enhance_audit_log.md

#### Enhanced OIDC 🎉
Enhancements to OIDC integration in Harbor improve support for user session logout and Proof Key for Code Exchange.

#### Integration with CloudNativeAI 🎉
Integrates Harbor with CloudNativeAI (CNAI) to enhance AI model management and processing capabilities, enabling seamless storage, versioning, and retrieval of AI models. This integration supports the CloudNativeAI model specification, improving compatibility and scalability for managing AI workflows. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/AI-model-processor.md

#### Redis TLS support 🎉
Redis TLS support has been introduced to enhance the security of communication between Harbor components and Redis.

* Add swagger api and audit_log_ext table model by @stonezdj in https://github.com/goharbor/harbor/pull/21360
* Add configure item for audit_log_disable by @stonezdj in https://github.com/goharbor/harbor/pull/21368
* Add config max_job_duration_hours for jobservice by @stonezdj in https://github.com/goharbor/harbor/pull/21390
* Add middleware for audit log by @stonezdj in https://github.com/goharbor/harbor/pull/21376
* Add dao and manager for audit log ext by @stonezdj in https://github.com/goharbor/harbor/pull/21379
* Implement audit log ext API by @stonezdj in https://github.com/goharbor/harbor/pull/21414
* Add user login event to audit log by @stonezdj in https://github.com/goharbor/harbor/pull/21415
* Add user event and config event by @stonezdj in https://github.com/goharbor/harbor/pull/21455
* Update purge audit to purge both audit_log_ext and audit_log by @stonezdj in https://github.com/goharbor/harbor/pull/21608
* Add OIDC login event by @stonezdj in https://github.com/goharbor/harbor/pull/21650
* feat: implement the CNAI model processor by @chlins in https://github.com/goharbor/harbor/pull/21663
* oidclogout by @wy65701436 in https://github.com/goharbor/harbor/pull/21718
* Feat: artifact adds AI Model type by @Liam-Zhao in https://github.com/goharbor/harbor/pull/21691
### Enhancement 🚀
* Enable MAX_JOB_DURATION_SECONDS in the jobservice container by @stonezdj in https://github.com/goharbor/harbor/pull/21232
* feat: extend the p2p preheat policy by @chlins in https://github.com/goharbor/harbor/pull/21115
* fix: replication rule message in UI by @bupd in https://github.com/goharbor/harbor/pull/21299
* feat: add execution_id and task_id to the replication webhook payload by @chlins in https://github.com/goharbor/harbor/pull/21614
* support to audit logs by @xuelichao in https://github.com/goharbor/harbor/pull/21377
* Revamp Copy Pull Command by @bupd in https://github.com/goharbor/harbor/pull/21155
* Add PKCE support for OIDC authentication by @reasonerjt in https://github.com/goharbor/harbor/pull/21702
* feat: Persistent Page Size UI by @bupd in https://github.com/goharbor/harbor/pull/21627
### Component updates ⬆️
* Fix auth config oidc scope regex by @rlacko58 in https://github.com/goharbor/harbor/pull/20483
* fix build package issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21087
* Update fr-fr-lang.json by @tostt in https://github.com/goharbor/harbor/pull/21082
* chore: fix some comments by @cangqiaoyuzhuo in https://github.com/goharbor/harbor/pull/21109
* bump base version by @wy65701436 in https://github.com/goharbor/harbor/pull/21111
* chore(deps): bump go.opentelemetry.io/otel/sdk from 1.29.0 to 1.31.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21106
* chore(deps): bump k8s.io/api from 0.31.1 to 0.31.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21104
* chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.27.0 to 1.31.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21107
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.51.0 to 0.56.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21131
* chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1193 to 1.63.47 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21130
* chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21132
* chore(deps): bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21105
* chore(deps): bump golang.org/x/text from 0.19.0 to 0.20.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21161
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.56.0 to 0.57.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21160
* chore(deps): bump go.opentelemetry.io/otel from 1.31.0 to 1.32.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21162
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.159 to 1.0.164 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21159
* chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21158
* Fix postgres script permissions by @hajnalmt in https://github.com/goharbor/harbor/pull/21007
* fix: event-based replication deletion not work when policy with label by @chlins in https://github.com/goharbor/harbor/pull/21215
* fix robot deletion event by @wy65701436 in https://github.com/goharbor/harbor/pull/21234
* fix robot account creation issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21310
* chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21307
* fix export cve permission issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21325
* Fixed the type in DTR adapter info by @lysunkin in https://github.com/goharbor/harbor/pull/21357
* fix: unify the auth data handle to the decode method by @chlins in https://github.com/goharbor/harbor/pull/21350
* Skip admin and change oidc user not found message more readable by @stonezdj in https://github.com/goharbor/harbor/pull/21061
* Update prepare to avoid error when max_job_duration_hours not configured by @stonezdj in https://github.com/goharbor/harbor/pull/21395
* bump up swagger by @wy65701436 in https://github.com/goharbor/harbor/pull/21396
* Remove id field from payload when update purge audit or gc schedule by @stonezdj in https://github.com/goharbor/harbor/pull/21408
* chore(deps): bump github.com/beego/beego/v2 from 2.2.1 to 2.3.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21321
* update spectral image by @wy65701436 in https://github.com/goharbor/harbor/pull/21410
* bump mockery by @wy65701436 in https://github.com/goharbor/harbor/pull/21419
* chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.47 to 1.63.80 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21405
* chore(deps): bump golang.org/x/net from 0.30.0 to 0.33.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21413
* Fix Overlay Issue in Replication Page UI by @bupd in https://github.com/goharbor/harbor/pull/21069
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.164 to 1.0.177 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21404
* chore(deps): bump k8s.io/apimachinery from 0.31.2 to 0.32.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21319
* chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.25.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21381
* separate buildin values by @wy65701436 in https://github.com/goharbor/harbor/pull/21425
* Bump up trivy to v0.58.2, trivy adapter to v0.32.3 (#21417) by @reasonerjt in https://github.com/goharbor/harbor/pull/21442
* chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.63.80 to 1.63.84 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21437
* chore(deps): bump k8s.io/client-go from 0.31.1 to 0.32.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21436
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.57.0 to 0.59.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21439
* chore(deps): bump golang.org/x/time from 0.7.0 to 0.9.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21438
* chore(deps): bump go.opentelemetry.io/otel/sdk from 1.31.0 to 1.34.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21440
* Full spanish harbor ui translation by @sergioarmgpl in https://github.com/goharbor/harbor/pull/21369
* Fix: Incorrect Data Display in Replications Table by @bupd in https://github.com/goharbor/harbor/pull/21461
* Fix Overflow in Interrogation Services Page by @bupd in https://github.com/goharbor/harbor/pull/21043
* enlarge the gc workers to 10 by @wy65701436 in https://github.com/goharbor/harbor/pull/21462
* chore(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.10 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21464
* chore(deps): bump github.com/aws/aws-sdk-go from 1.55.5 to 1.55.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21467
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.177 to 1.0.180 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21613
* chore(deps): bump helm.sh/helm/v3 from 3.16.2 to 3.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21468
* chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.31.0 to 1.34.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21465
* Fix issue with user create/delete/update event by @stonezdj in https://github.com/goharbor/harbor/pull/21651
* add redis tls support for core&jobservice by @MinerYang in https://github.com/goharbor/harbor/pull/21654
* remove version info for anonymous users by @MinerYang in https://github.com/goharbor/harbor/pull/21672
* prepare redis tls config by @MinerYang in https://github.com/goharbor/harbor/pull/21667
* Adjust the audit_log_ext column size to keep align with audit_log table by @stonezdj in https://github.com/goharbor/harbor/pull/21678
* remove redis sentinel patch from builder by @MinerYang in https://github.com/goharbor/harbor/pull/21679
* update tlsOptions for external redis by @MinerYang in https://github.com/goharbor/harbor/pull/21681
* add prepare migration script for 2.13.0 by @MinerYang in https://github.com/goharbor/harbor/pull/21680
* Change audit log label by @stonezdj in https://github.com/goharbor/harbor/pull/21703
* fix issue 20828 by @wy65701436 in https://github.com/goharbor/harbor/pull/21726
* consume the downstream distribution by @wy65701436 in https://github.com/goharbor/harbor/pull/21733
* Add Missing copyright headers in src/portal by @bupd in https://github.com/goharbor/harbor/pull/21693
* Add Missing copyright headers in src/portal part 2 by @bupd in https://github.com/goharbor/harbor/pull/21694
* Add Missing Headers in UI part 3 by @bupd in https://github.com/goharbor/harbor/pull/21695
* Replace Vmware to goharbor by @bupd in https://github.com/goharbor/harbor/pull/21696
* Add Lint Check for Copyright Headers in UI by @bupd in https://github.com/goharbor/harbor/pull/21692
* Fix: Copy Pull Button Overlap with Tag Immutable Label by @bupd in https://github.com/goharbor/harbor/pull/21720
* fix i18n issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21748
* fix: fix replication of multiple projects with numeric names by @cgirard-mir in https://github.com/goharbor/harbor/pull/21474
* update golang to v1.23.7 by @wy65701436 in https://github.com/goharbor/harbor/pull/21749
* chore(deps): bump golang.org/x/time from 0.9.0 to 0.11.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21715
* Fix Password Validation in UI by @bupd in https://github.com/goharbor/harbor/pull/21697
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.180 to 1.0.185 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21717
* fix: limit the file size of the cnai model processor by @chlins in https://github.com/goharbor/harbor/pull/21759
* redirect to the sign-in page by @wy65701436 in https://github.com/goharbor/harbor/pull/21764
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.57.0 to 0.60.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21716
* fix logout redirect by @wy65701436 in https://github.com/goharbor/harbor/pull/21765
* fix: Remove top error message about no README or license by @Liam-Zhao in https://github.com/goharbor/harbor/pull/21754
* chore(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21731
* chore(deps): bump golang.org/x/net from 0.34.0 to 0.37.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21744
* chore(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21745
* Fix token service returning empty token on tls certificate issue without any error by @dee-kryvenko in https://github.com/goharbor/harbor/pull/20081
* Suppress aborthandler by @ianseyer in https://github.com/goharbor/harbor/pull/21479
* update oidc login log level by @wy65701436 in https://github.com/goharbor/harbor/pull/21775
* chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21769
* update robot log level by @wy65701436 in https://github.com/goharbor/harbor/pull/21778
* Bump golang.org/x/oauth2 from v0.25.0 to v0.27.0 by @yevchuk-kostiantyn in https://github.com/goharbor/harbor/pull/21757
* fix 21118 by @wy65701436 in https://github.com/goharbor/harbor/pull/21792
* clean up robot account for SBOM Job by @MinerYang in https://github.com/goharbor/harbor/pull/21794
* Add tips for \Other events\ by @stonezdj in https://github.com/goharbor/harbor/pull/21788
* Add operation description for delete tag event by @stonezdj in https://github.com/goharbor/harbor/pull/21807
* fix orm filterable issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21797
* Fix: Modelfs overflow in UI. by @bupd in https://github.com/goharbor/harbor/pull/21791
* Add operation_descrtion when forward audit log by @stonezdj in https://github.com/goharbor/harbor/pull/21786
* Remove top copy pull cmd button by @bupd in https://github.com/goharbor/harbor/pull/21810
* chore: format the go.mod by @chlins in https://github.com/goharbor/harbor/pull/21812
* bump up golang version by @wy65701436 in https://github.com/goharbor/harbor/pull/21813
* Rule out the duplicate login event and false logout event for oidc by @stonezdj in https://github.com/goharbor/harbor/pull/21811
* bump up jwt and beego by @wy65701436 in https://github.com/goharbor/harbor/pull/21814
* build base images for v2.13 by @wy65701436 in https://github.com/goharbor/harbor/pull/21820
### Breaking Changes 🛠
* update csrf key generation by @wy65701436 in https://github.com/goharbor/harbor/pull/21154
* remove with_signature by @wy65701436 in https://github.com/goharbor/harbor/pull/21420
### Deprecations ❌
* Remove robotV1 from code base (#20958) by @sgaist in https://github.com/goharbor/harbor/pull/20991
### Other Changes
* fix release script by @wy65701436 in https://github.com/goharbor/harbor/pull/21100
* remove asc files handling by @wy65701436 in https://github.com/goharbor/harbor/pull/21214
* chore(deps): bump codecov/codecov-action from 4 to 5 by @dependabot in https://github.com/goharbor/harbor/pull/21192
* chore(deps): bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in https://github.com/goharbor/harbor/pull/21446
* (Doc): Add supported Node Version for Harbor UI in .nvmrc by @bupd in https://github.com/goharbor/harbor/pull/21153
* Update xpath for some UI components by @stonezdj in https://github.com/goharbor/harbor/pull/21817

## New Contributors
* @rlacko58 made their first contribution in https://github.com/goharbor/harbor/pull/20483
* @cangqiaoyuzhuo made their first contribution in https://github.com/goharbor/harbor/pull/21109
* @yuzp1996 made their first contribution in https://github.com/goharbor/harbor/pull/21343
* @lysunkin made their first contribution in https://github.com/goharbor/harbor/pull/21357
* @sgaist made their first contribution in https://github.com/goharbor/harbor/pull/20991
* @sergioarmgpl made their first contribution in https://github.com/goharbor/harbor/pull/21369
* @Liam-Zhao made their first contribution in https://github.com/goharbor/harbor/pull/21691
* @cgirard-mir made their first contribution in https://github.com/goharbor/harbor/pull/21474
* @dee-kryvenko made their first contribution in https://github.com/goharbor/harbor/pull/20081
* @ianseyer made their first contribution in https://github.com/goharbor/harbor/pull/21479
* @yevchuk-kostiantyn made their first contribution in https://github.com/goharbor/harbor/pull/21757

**Full Changelog**: https://github.com/goharbor/harbor/compare/v2.12.0...v2.13.0-rc1

v2.12.0 (2024-11-08)



## What's Changed
### Exciting New Features 🎉

#### Enhanced robot account 🎉
 The enhancements to the robot account functionality in Harbor v2.12.0, aimed at improving access control and automation in CI/CD processes. Key changes include additional configuration options for better integration and security management. For more details, please refer to the design proposal: https://github.com/goharbor/community/blob/main/proposals/new/Robot-Account-Expand.md

#### Speed limit of proxy cache project 🎉
Harbor now supports to set the speed limit for the proxy cache projects. After Harbor v2.12.0, the user is able to simple control network speed when pulling artifacts from proxy cache projects.

#### Enhanced LDAP on-boarding process 
In v2.12.0, Harbor enhances the LDAP onboarding process to improve user login performance. This revision addresses previous performance issues, ensuring a smoother authentication experience.

#### Integration with ACR & ACR EE Registry 
Users can now seamlessly replicate images to and from the ACR & ACR EE registry, enhancing interoperability and flexibility within the Harbor ecosystem.

* feat: implement bandwidth limit for proxy-cache by @zyyw in https://github.com/goharbor/harbor/pull/20812
* enable audit log for robot by @wy65701436 in https://github.com/goharbor/harbor/pull/20843
* add creator for robot by @wy65701436 in https://github.com/goharbor/harbor/pull/20846
* enable robot full access by @wy65701436 in https://github.com/goharbor/harbor/pull/20754
* Feat: add acr ee support by @njucjc in https://github.com/goharbor/harbor/pull/19658
* Parallel attach ldap group by @stonezdj in https://github.com/goharbor/harbor/pull/20705
* UI Changes for Configuring Proxy-Cache Speed Limit by @kunal-511 in https://github.com/goharbor/harbor/pull/20946
### Enhancement 🚀
* add list project arifacts API by @wy65701436 in https://github.com/goharbor/harbor/pull/20803
* Feature export Harbor statistics as Prometheus metric by @tpoxa in https://github.com/goharbor/harbor/pull/18679
* Refactor: p2p preheat dragonfly driver by @chlins in https://github.com/goharbor/harbor/pull/20922
* Make it possible to build the spectral image also on ARM by @Vad1mo in https://github.com/goharbor/harbor/pull/20506
### Component updates ⬆️
* Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in https://github.com/goharbor/harbor/pull/20450
* Fix - 20469 sbom status and download issue by @xuelichao in https://github.com/goharbor/harbor/pull/20471
* chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20455
* chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20451
* chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20453
* Add sbom_report table to store sbom related information by @stonezdj in https://github.com/goharbor/harbor/pull/20473
* Separate the execution vendor type sbom from image_scan by @stonezdj in https://github.com/goharbor/harbor/pull/20504
* Fix multiple SBOM by @wy65701436 in https://github.com/goharbor/harbor/pull/20503
* Fix tooltip issue related to SBOM.Details by @stonezdj in https://github.com/goharbor/harbor/pull/20510
* tls support for pushing sbom by @wy65701436 in https://github.com/goharbor/harbor/pull/20514
* fix 20518 by @wy65701436 in https://github.com/goharbor/harbor/pull/20521
* fix http client to push sbom accessory by @wy65701436 in https://github.com/goharbor/harbor/pull/20525
* Response an error message when there is incomplete sbom generate job by @stonezdj in https://github.com/goharbor/harbor/pull/20526
* No sbom_overview when sbom is deleted by @stonezdj in https://github.com/goharbor/harbor/pull/20533
* Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in https://github.com/goharbor/harbor/pull/20538
* chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20487
* chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20542
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20541
* chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20488
* Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in https://github.com/goharbor/harbor/pull/20545
* Use internal registry url to push artifact accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20575
* Remove the delete local manifest when remote doesn't exist by @stonezdj in https://github.com/goharbor/harbor/pull/20597
* fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in https://github.com/goharbor/harbor/pull/20603
* fix: reduce the execution sweep job frequency from hourly to daily by @chlins in https://github.com/goharbor/harbor/pull/20601
* Add menu item for ko_KR local by @stonezdj in https://github.com/goharbor/harbor/pull/20602
* fix: hide the scan related button when installation without scanner by @chlins in https://github.com/goharbor/harbor/pull/20616
* chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20567
* chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20609
* Add translation for zh_CN by @stonezdj in https://github.com/goharbor/harbor/pull/20617
* fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in https://github.com/goharbor/harbor/pull/20652
* Add SBOM translation for fr_FR by @flbla in https://github.com/goharbor/harbor/pull/20625
* bump up beego to v2.2.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20555
* fix: correct the API data for the dependencies of the helm chart by @chlins in https://github.com/goharbor/harbor/pull/20676
* chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20653
* chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20655
* chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20656
* JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in https://github.com/goharbor/harbor/pull/20684
* Change the log message when PostScan failed. by @stonezdj in https://github.com/goharbor/harbor/pull/20650
* feat: bump mockery and switch to generate by config file by @chlins in https://github.com/goharbor/harbor/pull/20742
* chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20713
* chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20715
* make distribution_src configurable by @MinerYang in https://github.com/goharbor/harbor/pull/20769
* chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20716
* chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20721
* refactor: unify the mock file generation by @chlins in https://github.com/goharbor/harbor/pull/20765
* Extend AWS ECR regex for c2s support by @ethanchowell in https://github.com/goharbor/harbor/pull/20648
* remove migrate-patch by @kariya-mitsuru in https://github.com/goharbor/harbor/pull/20619
* Check create when fire the artifact event by @stonezdj in https://github.com/goharbor/harbor/pull/20832
* fix: fix the GC job index data race by @chlins in https://github.com/goharbor/harbor/pull/20830
* fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in https://github.com/goharbor/harbor/pull/20858
* fix: migrate cicd to registry goharbor by @zyyw in https://github.com/goharbor/harbor/pull/20872
* Fixed the ui bug of banner coming over the search result container by @kunal-511 in https://github.com/goharbor/harbor/pull/20871
* refactor: remove useless error check for scan data export job by @chlins in https://github.com/goharbor/harbor/pull/20883
* Escape the - with \- when it is a char of itself by @stonezdj in https://github.com/goharbor/harbor/pull/20892
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20878
* chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20783
* chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in https://github.com/goharbor/harbor/pull/20888
* chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20879
* chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20785
* chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20784
* update robot creator database scheme by @wy65701436 in https://github.com/goharbor/harbor/pull/20918
* Update fr-fr-lang.json by @tostt in https://github.com/goharbor/harbor/pull/20942
* fix: p2p instance test connection by @chlins in https://github.com/goharbor/harbor/pull/20968
* update golang version by @wy65701436 in https://github.com/goharbor/harbor/pull/21014
* add prepare migration script for 2.12.0 by @MinerYang in https://github.com/goharbor/harbor/pull/21022
* chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21008
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20983
* feat: support Alibaba ACR proxy cache type by @njucjc in https://github.com/goharbor/harbor/pull/19692
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20984
* remove the robot update permission by @wy65701436 in https://github.com/goharbor/harbor/pull/21028
* Change the log level from warning to debug to avoid noise when there … by @stonezdj in https://github.com/goharbor/harbor/pull/21034
* fix: nil pointer dereference when failed to scan out the quota records from redis by @microyahoo in https://github.com/goharbor/harbor/pull/21046
* Change the base directory of prepare container in macOS by @stonezdj in https://github.com/goharbor/harbor/pull/21035
* Change setHealth to setUnHealth to avoid misunderstanding by @stonezdj in https://github.com/goharbor/harbor/pull/21047
* Fix Default Horizontal Scrollbar in Replication Page by @bupd in https://github.com/goharbor/harbor/pull/21033
* refresh base image by @wy65701436 in https://github.com/goharbor/harbor/pull/21084
* add pagesize for replicaiton by @wy65701436 in https://github.com/goharbor/harbor/pull/21081
* temporary disable gpg sign by @wy65701436 in https://github.com/goharbor/harbor/pull/21085
* fix build package issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21090
* [cherry-pick] Update fr-fr-lang.json (#21082) by @wy65701436 in https://github.com/goharbor/harbor/pull/21097
* refresh base by @wy65701436 in https://github.com/goharbor/harbor/pull/21126
### Docs update 🗄️
* doc: update minor release support matrix with v2.11.x by @zyyw in https://github.com/goharbor/harbor/pull/20558
* Fixes-21021 Display proxy cache in project configuration page by @xuelichao in https://github.com/goharbor/harbor/pull/21048
### Other Changes
* fix: update the cron of execution sweep in test by @zyyw in https://github.com/goharbor/harbor/pull/20636
* fix: change coporate harbor to registry.goharbor.io by @zyyw in https://github.com/goharbor/harbor/pull/20651
* update ldap by @wy65701436 in https://github.com/goharbor/harbor/pull/20724
* add Test Case for SBOM feature by @zyyw in https://github.com/goharbor/harbor/pull/20797
* Fix #20658 docker-compose `version` is obsolete warning by @jhdxr in https://github.com/goharbor/harbor/pull/20659
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20845
* refresh base for v2.12 by @wy65701436 in https://github.com/goharbor/harbor/pull/21095
* fix release script by @wy65701436 in https://github.com/goharbor/harbor/pull/21101

## New Contributors
* @flbla made their first contribution in https://github.com/goharbor/harbor/pull/20625
* @mohamedawnallah made their first contribution in https://github.com/goharbor/harbor/pull/20684
* @ethanchowell made their first contribution in https://github.com/goharbor/harbor/pull/20648
* @kariya-mitsuru made their first contribution in https://github.com/goharbor/harbor/pull/20619
* @jhdxr made their first contribution in https://github.com/goharbor/harbor/pull/20659
* @johankok made their first contribution in https://github.com/goharbor/harbor/pull/20841
* @kunal-511 made their first contribution in https://github.com/goharbor/harbor/pull/20871
* @BruceAko made their first contribution in https://github.com/goharbor/harbor/pull/20861
* @4everming made their first contribution in https://github.com/goharbor/harbor/pull/20929
* @njucjc made their first contribution in https://github.com/goharbor/harbor/pull/19658
* @bupd made their first contribution in https://github.com/goharbor/harbor/pull/21033

**Full Changelog**: https://github.com/goharbor/harbor/compare/v2.11.0...v2.12.0

v2.12.0-rc2 (2024-11-07)



## What's Changed
### Exciting New Features 🎉
* feat: implement bandwidth limit for proxy-cache by @zyyw in https://github.com/goharbor/harbor/pull/20812
* enable audit log for robot by @wy65701436 in https://github.com/goharbor/harbor/pull/20843
* add creator for robot by @wy65701436 in https://github.com/goharbor/harbor/pull/20846
* enable robot full access by @wy65701436 in https://github.com/goharbor/harbor/pull/20754
* Feat: add acr ee support by @njucjc in https://github.com/goharbor/harbor/pull/19658
### Enhancement 🚀
* add list project arifacts API by @wy65701436 in https://github.com/goharbor/harbor/pull/20803
* Parallel attach ldap group by @stonezdj in https://github.com/goharbor/harbor/pull/20705
* Feature export Harbor statistics as Prometheus metric by @tpoxa in https://github.com/goharbor/harbor/pull/18679
* Refactor: p2p preheat dragonfly driver by @chlins in https://github.com/goharbor/harbor/pull/20922
* Make it possible to build the spectral image also on ARM by @Vad1mo in https://github.com/goharbor/harbor/pull/20506
* UI Changes for Configuring Proxy-Cache Speed Limit by @kunal-511 in https://github.com/goharbor/harbor/pull/20946
### Component updates ⬆️
* Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in https://github.com/goharbor/harbor/pull/20450
* Fix - 20469 sbom status and download issue by @xuelichao in https://github.com/goharbor/harbor/pull/20471
* chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20455
* chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20451
* chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20453
* Add sbom_report table to store sbom related information by @stonezdj in https://github.com/goharbor/harbor/pull/20473
* Separate the execution vendor type sbom from image_scan by @stonezdj in https://github.com/goharbor/harbor/pull/20504
* Fix multiple SBOM by @wy65701436 in https://github.com/goharbor/harbor/pull/20503
* Fix tooltip issue related to SBOM.Details by @stonezdj in https://github.com/goharbor/harbor/pull/20510
* tls support for pushing sbom by @wy65701436 in https://github.com/goharbor/harbor/pull/20514
* fix 20518 by @wy65701436 in https://github.com/goharbor/harbor/pull/20521
* fix http client to push sbom accessory by @wy65701436 in https://github.com/goharbor/harbor/pull/20525
* Response an error message when there is incomplete sbom generate job by @stonezdj in https://github.com/goharbor/harbor/pull/20526
* No sbom_overview when sbom is deleted by @stonezdj in https://github.com/goharbor/harbor/pull/20533
* Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in https://github.com/goharbor/harbor/pull/20538
* chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20487
* chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20542
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20541
* chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20488
* Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in https://github.com/goharbor/harbor/pull/20545
* Use internal registry url to push artifact accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20575
* Remove the delete local manifest when remote doesn't exist by @stonezdj in https://github.com/goharbor/harbor/pull/20597
* fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in https://github.com/goharbor/harbor/pull/20603
* fix: reduce the execution sweep job frequency from hourly to daily by @chlins in https://github.com/goharbor/harbor/pull/20601
* Add menu item for ko_KR local by @stonezdj in https://github.com/goharbor/harbor/pull/20602
* fix: hide the scan related button when installation without scanner by @chlins in https://github.com/goharbor/harbor/pull/20616
* chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20567
* chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20609
* Add translation for zh_CN by @stonezdj in https://github.com/goharbor/harbor/pull/20617
* fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in https://github.com/goharbor/harbor/pull/20652
* Add SBOM translation for fr_FR by @flbla in https://github.com/goharbor/harbor/pull/20625
* bump up beego to v2.2.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20555
* fix: correct the API data for the dependencies of the helm chart by @chlins in https://github.com/goharbor/harbor/pull/20676
* chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20653
* chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20655
* chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20656
* JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in https://github.com/goharbor/harbor/pull/20684
* Change the log message when PostScan failed. by @stonezdj in https://github.com/goharbor/harbor/pull/20650
* feat: bump mockery and switch to generate by config file by @chlins in https://github.com/goharbor/harbor/pull/20742
* chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20713
* chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20715
* make distribution_src configurable by @MinerYang in https://github.com/goharbor/harbor/pull/20769
* chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20716
* chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20721
* refactor: unify the mock file generation by @chlins in https://github.com/goharbor/harbor/pull/20765
* Extend AWS ECR regex for c2s support by @ethanchowell in https://github.com/goharbor/harbor/pull/20648
* remove migrate-patch by @kariya-mitsuru in https://github.com/goharbor/harbor/pull/20619
* Check create when fire the artifact event by @stonezdj in https://github.com/goharbor/harbor/pull/20832
* fix: fix the GC job index data race by @chlins in https://github.com/goharbor/harbor/pull/20830
* fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in https://github.com/goharbor/harbor/pull/20858
* fix: migrate cicd to registry goharbor by @zyyw in https://github.com/goharbor/harbor/pull/20872
* Fixed the ui bug of banner coming over the search result container by @kunal-511 in https://github.com/goharbor/harbor/pull/20871
* refactor: remove useless error check for scan data export job by @chlins in https://github.com/goharbor/harbor/pull/20883
* Escape the - with \- when it is a char of itself by @stonezdj in https://github.com/goharbor/harbor/pull/20892
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20878
* chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20783
* chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in https://github.com/goharbor/harbor/pull/20888
* chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20879
* chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20785
* chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20784
* update robot creator database scheme by @wy65701436 in https://github.com/goharbor/harbor/pull/20918
* Update fr-fr-lang.json by @tostt in https://github.com/goharbor/harbor/pull/20942
* fix: p2p instance test connection by @chlins in https://github.com/goharbor/harbor/pull/20968
* update golang version by @wy65701436 in https://github.com/goharbor/harbor/pull/21014
* add prepare migration script for 2.12.0 by @MinerYang in https://github.com/goharbor/harbor/pull/21022
* chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21008
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20983
* feat: support Alibaba ACR proxy cache type by @njucjc in https://github.com/goharbor/harbor/pull/19692
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20984
* remove the robot update permission by @wy65701436 in https://github.com/goharbor/harbor/pull/21028
* Change the log level from warning to debug to avoid noise when there … by @stonezdj in https://github.com/goharbor/harbor/pull/21034
* fix: nil pointer dereference when failed to scan out the quota records from redis by @microyahoo in https://github.com/goharbor/harbor/pull/21046
* Change the base directory of prepare container in macOS by @stonezdj in https://github.com/goharbor/harbor/pull/21035
* Change setHealth to setUnHealth to avoid misunderstanding by @stonezdj in https://github.com/goharbor/harbor/pull/21047
* Fix Default Horizontal Scrollbar in Replication Page by @bupd in https://github.com/goharbor/harbor/pull/21033
* refresh base image by @wy65701436 in https://github.com/goharbor/harbor/pull/21084
* add pagesize for replicaiton by @wy65701436 in https://github.com/goharbor/harbor/pull/21081
* temporary disable gpg sign by @wy65701436 in https://github.com/goharbor/harbor/pull/21085
* fix build package issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21090
* [cherry-pick] Update fr-fr-lang.json (#21082) by @wy65701436 in https://github.com/goharbor/harbor/pull/21097
* refresh base by @wy65701436 in https://github.com/goharbor/harbor/pull/21126
### Docs update 🗄️
* doc: update minor release support matrix with v2.11.x by @zyyw in https://github.com/goharbor/harbor/pull/20558
* Fixes-21021 Display proxy cache in project configuration page by @xuelichao in https://github.com/goharbor/harbor/pull/21048
### Other Changes
* fix: update the cron of execution sweep in test by @zyyw in https://github.com/goharbor/harbor/pull/20636
* fix: change coporate harbor to registry.goharbor.io by @zyyw in https://github.com/goharbor/harbor/pull/20651
* update ldap by @wy65701436 in https://github.com/goharbor/harbor/pull/20724
* add Test Case for SBOM feature by @zyyw in https://github.com/goharbor/harbor/pull/20797
* Fix #20658 docker-compose `version` is obsolete warning by @jhdxr in https://github.com/goharbor/harbor/pull/20659
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20845
* refresh base for v2.12 by @wy65701436 in https://github.com/goharbor/harbor/pull/21095
* fix release script by @wy65701436 in https://github.com/goharbor/harbor/pull/21101

## New Contributors
* @flbla made their first contribution in https://github.com/goharbor/harbor/pull/20625
* @mohamedawnallah made their first contribution in https://github.com/goharbor/harbor/pull/20684
* @ethanchowell made their first contribution in https://github.com/goharbor/harbor/pull/20648
* @kariya-mitsuru made their first contribution in https://github.com/goharbor/harbor/pull/20619
* @jhdxr made their first contribution in https://github.com/goharbor/harbor/pull/20659
* @johankok made their first contribution in https://github.com/goharbor/harbor/pull/20841
* @kunal-511 made their first contribution in https://github.com/goharbor/harbor/pull/20871
* @BruceAko made their first contribution in https://github.com/goharbor/harbor/pull/20861
* @4everming made their first contribution in https://github.com/goharbor/harbor/pull/20929
* @njucjc made their first contribution in https://github.com/goharbor/harbor/pull/19658
* @bupd made their first contribution in https://github.com/goharbor/harbor/pull/21033

**Full Changelog**: https://github.com/goharbor/harbor/compare/v2.11.0...v2.12.0-rc2

v2.12.0-rc1 (2024-10-27)



## What's Changed
### Exciting New Features 🎉
* feat: implement bandwidth limit for proxy-cache by @zyyw in https://github.com/goharbor/harbor/pull/20812
* enable audit log for robot by @wy65701436 in https://github.com/goharbor/harbor/pull/20843
* add creator for robot by @wy65701436 in https://github.com/goharbor/harbor/pull/20846
* enable robot full access by @wy65701436 in https://github.com/goharbor/harbor/pull/20754
* Feat: add acr ee support by @njucjc in https://github.com/goharbor/harbor/pull/19658
### Enhancement 🚀
* add list project arifacts API by @wy65701436 in https://github.com/goharbor/harbor/pull/20803
* Parallel attach ldap group by @stonezdj in https://github.com/goharbor/harbor/pull/20705
* Feature export Harbor statistics as Prometheus metric by @tpoxa in https://github.com/goharbor/harbor/pull/18679
* Refactor: p2p preheat dragonfly driver by @chlins in https://github.com/goharbor/harbor/pull/20922
* Make it possible to build the spectral image also on ARM by @Vad1mo in https://github.com/goharbor/harbor/pull/20506
* UI Changes for Configuring Proxy-Cache Speed Limit by @kunal-511 in https://github.com/goharbor/harbor/pull/20946
### Component updates ⬆️
* Bump up trivy version to v0.51.2, trivyadapter to v0.31.2 by @zyyw in https://github.com/goharbor/harbor/pull/20450
* Fix - 20469 sbom status and download issue by @xuelichao in https://github.com/goharbor/harbor/pull/20471
* chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20455
* chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.19.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20451
* chore(deps): bump github.com/go-openapi/swag from 0.22.7 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20453
* Add sbom_report table to store sbom related information by @stonezdj in https://github.com/goharbor/harbor/pull/20473
* Separate the execution vendor type sbom from image_scan by @stonezdj in https://github.com/goharbor/harbor/pull/20504
* Fix multiple SBOM by @wy65701436 in https://github.com/goharbor/harbor/pull/20503
* Fix tooltip issue related to SBOM.Details by @stonezdj in https://github.com/goharbor/harbor/pull/20510
* tls support for pushing sbom by @wy65701436 in https://github.com/goharbor/harbor/pull/20514
* fix 20518 by @wy65701436 in https://github.com/goharbor/harbor/pull/20521
* fix http client to push sbom accessory by @wy65701436 in https://github.com/goharbor/harbor/pull/20525
* Response an error message when there is incomplete sbom generate job by @stonezdj in https://github.com/goharbor/harbor/pull/20526
* No sbom_overview when sbom is deleted by @stonezdj in https://github.com/goharbor/harbor/pull/20533
* Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in https://github.com/goharbor/harbor/pull/20538
* chore(deps): bump github.com/go-asn1-ber/asn1-ber from 1.5.6 to 1.5.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20487
* chore(deps): bump github.com/aws/aws-sdk-go from 1.50.24 to 1.53.14 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20542
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.97 to 1.0.138 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20541
* chore(deps): bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20488
* Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in https://github.com/goharbor/harbor/pull/20545
* Use internal registry url to push artifact accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20575
* Remove the delete local manifest when remote doesn't exist by @stonezdj in https://github.com/goharbor/harbor/pull/20597
* fix: update the execution sweep sql to resolve the exec deletion conflict by @chlins in https://github.com/goharbor/harbor/pull/20603
* fix: reduce the execution sweep job frequency from hourly to daily by @chlins in https://github.com/goharbor/harbor/pull/20601
* Add menu item for ko_KR local by @stonezdj in https://github.com/goharbor/harbor/pull/20602
* fix: hide the scan related button when installation without scanner by @chlins in https://github.com/goharbor/harbor/pull/20616
* chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20567
* chore(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20609
* Add translation for zh_CN by @stonezdj in https://github.com/goharbor/harbor/pull/20617
* fix: disable the scan related button when installation without scanner or scanner deactived by @chlins in https://github.com/goharbor/harbor/pull/20652
* Add SBOM translation for fr_FR by @flbla in https://github.com/goharbor/harbor/pull/20625
* bump up beego to v2.2.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20555
* fix: correct the API data for the dependencies of the helm chart by @chlins in https://github.com/goharbor/harbor/pull/20676
* chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20653
* chore(deps): bump k8s.io/api from 0.30.0 to 0.30.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20655
* chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20656
* JobService: fix for missing log data in jobservice DB logging by @mohamedawnallah in https://github.com/goharbor/harbor/pull/20684
* Change the log message when PostScan failed. by @stonezdj in https://github.com/goharbor/harbor/pull/20650
* feat: bump mockery and switch to generate by config file by @chlins in https://github.com/goharbor/harbor/pull/20742
* chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20713
* chore(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20715
* make distribution_src configurable by @MinerYang in https://github.com/goharbor/harbor/pull/20769
* chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20716
* chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20721
* refactor: unify the mock file generation by @chlins in https://github.com/goharbor/harbor/pull/20765
* Extend AWS ECR regex for c2s support by @ethanchowell in https://github.com/goharbor/harbor/pull/20648
* remove migrate-patch by @kariya-mitsuru in https://github.com/goharbor/harbor/pull/20619
* Check create when fire the artifact event by @stonezdj in https://github.com/goharbor/harbor/pull/20832
* fix: fix the GC job index data race by @chlins in https://github.com/goharbor/harbor/pull/20830
* fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry by @zyyw in https://github.com/goharbor/harbor/pull/20858
* fix: migrate cicd to registry goharbor by @zyyw in https://github.com/goharbor/harbor/pull/20872
* Fixed the ui bug of banner coming over the search result container by @kunal-511 in https://github.com/goharbor/harbor/pull/20871
* refactor: remove useless error check for scan data export job by @chlins in https://github.com/goharbor/harbor/pull/20883
* Escape the - with \- when it is a char of itself by @stonezdj in https://github.com/goharbor/harbor/pull/20892
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20878
* chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20783
* chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui by @dependabot in https://github.com/goharbor/harbor/pull/20888
* chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20879
* chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20785
* chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20784
* update robot creator database scheme by @wy65701436 in https://github.com/goharbor/harbor/pull/20918
* Update fr-fr-lang.json by @tostt in https://github.com/goharbor/harbor/pull/20942
* fix: p2p instance test connection by @chlins in https://github.com/goharbor/harbor/pull/20968
* update golang version by @wy65701436 in https://github.com/goharbor/harbor/pull/21014
* add prepare migration script for 2.12.0 by @MinerYang in https://github.com/goharbor/harbor/pull/21022
* chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/21008
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20983
* feat: support Alibaba ACR proxy cache type by @njucjc in https://github.com/goharbor/harbor/pull/19692
* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20984
* remove the robot update permission by @wy65701436 in https://github.com/goharbor/harbor/pull/21028
* Change the log level from warning to debug to avoid noise when there … by @stonezdj in https://github.com/goharbor/harbor/pull/21034
* fix: nil pointer dereference when failed to scan out the quota records from redis by @microyahoo in https://github.com/goharbor/harbor/pull/21046
* Change the base directory of prepare container in macOS by @stonezdj in https://github.com/goharbor/harbor/pull/21035
* Change setHealth to setUnHealth to avoid misunderstanding by @stonezdj in https://github.com/goharbor/harbor/pull/21047
* Fix Default Horizontal Scrollbar in Replication Page by @bupd in https://github.com/goharbor/harbor/pull/21033
* refresh base image by @wy65701436 in https://github.com/goharbor/harbor/pull/21084
* add pagesize for replicaiton by @wy65701436 in https://github.com/goharbor/harbor/pull/21081
* temporary disable gpg sign by @wy65701436 in https://github.com/goharbor/harbor/pull/21085
* fix build package issue by @wy65701436 in https://github.com/goharbor/harbor/pull/21090
* [cherry-pick] Update fr-fr-lang.json (#21082) by @wy65701436 in https://github.com/goharbor/harbor/pull/21097
### Docs update 🗄️
* doc: update minor release support matrix with v2.11.x by @zyyw in https://github.com/goharbor/harbor/pull/20558
* Fixes-21021 Display proxy cache in project configuration page by @xuelichao in https://github.com/goharbor/harbor/pull/21048
### Other Changes
* fix: update the cron of execution sweep in test by @zyyw in https://github.com/goharbor/harbor/pull/20636
* fix: change coporate harbor to registry.goharbor.io by @zyyw in https://github.com/goharbor/harbor/pull/20651
* update ldap by @wy65701436 in https://github.com/goharbor/harbor/pull/20724
* add Test Case for SBOM feature by @zyyw in https://github.com/goharbor/harbor/pull/20797
* Fix #20658 docker-compose `version` is obsolete warning by @jhdxr in https://github.com/goharbor/harbor/pull/20659
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20845
* refresh base for v2.12 by @wy65701436 in https://github.com/goharbor/harbor/pull/21095

## New Contributors
* @flbla made their first contribution in https://github.com/goharbor/harbor/pull/20625
* @mohamedawnallah made their first contribution in https://github.com/goharbor/harbor/pull/20684
* @ethanchowell made their first contribution in https://github.com/goharbor/harbor/pull/20648
* @kariya-mitsuru made their first contribution in https://github.com/goharbor/harbor/pull/20619
* @jhdxr made their first contribution in https://github.com/goharbor/harbor/pull/20659
* @johankok made their first contribution in https://github.com/goharbor/harbor/pull/20841
* @kunal-511 made their first contribution in https://github.com/goharbor/harbor/pull/20871
* @BruceAko made their first contribution in https://github.com/goharbor/harbor/pull/20861
* @4everming made their first contribution in https://github.com/goharbor/harbor/pull/20929
* @njucjc made their first contribution in https://github.com/goharbor/harbor/pull/19658
* @bupd made their first contribution in https://github.com/goharbor/harbor/pull/21033

**Full Changelog**: https://github.com/goharbor/harbor/compare/v2.11.0...v2.12.0-rc1

v2.11.0 (2024-06-06)



## Known issue
- [known issue #20412](https://github.com/goharbor/harbor/issues/20412) Harbor supports only one signature for each artifact been replicated to destination Harbor which is signed by legacy cosign. If you want to replicated multiple signatures for a subject image,  please using oci-1.1 mode(cosign v2.2.1+) for signing.
- [known issue #20565](https://github.com/goharbor/harbor/issues/20565) Issue with SBOM generation in Harbor v2.11.0 when using external Reverse Proxy (HTTP 404)
- [known issue #20691](https://github.com/goharbor/harbor/issues/20691) LDAP handshake failure with LDAP server has old TLS_RSA_* cipher suites. Workaround: add env variable GODEBUG="tlsrsakex=1"  to common/config/core/env file and restart Harbor.
## Tips
 - [Best practice](https://github.com/goharbor/harbor/wiki/Harbor-FAQs#notation-signature-accessory) for image singing with [Notation v1.2.0 ](https://github.com/notaryproject/notation/releases/tag/v1.2.0-alpha.1) in Harbor 

## What's Changed
### Exciting New Features 🎉
#### SBOM Generation and Management
 Harbor now provides robust support for generating Software Bill of Materials (SBOM) either manually or automatically. Users can conveniently view, download, and replicate SBOMs across different instances of Harbor.
> When `Automatically generate SBOM on push` is enabled and there are massive concurrent push to that project, users may need to enable asynchronously updating project quota by setting `core.quotaUpdateProvider: redis` (values.yaml for harbor-helm) or setting [core.quota_update_provider: redis](https://github.com/goharbor/harbor/blob/v2.11.0/make/harbor.yml.tmpl#L316) (`harbor.yml` for installation via docker-compose) so that it can reduce the overall resource consumption, like db connection, cpu usage and memory usage.

#### Supporting OCI Distribution Spec v1.1.0 🎉
Harbor now fully supports [OCI Distribution Spec v1.1.0](https://github.com/opencontainers/distribution-spec/tree/v1.1.0)

#### Integration with VolcEngine Registry
Users can now seamlessly replicate images to and from the VolcEngine registry, enhancing interoperability and flexibility within the Harbor ecosystem.

#### Korean UI Translation
The user interface of Harbor has been enriched with the addition of Korean language support, ensuring a more inclusive and accessible experience for Korean-speaking users.


### Enhancement 🚀
* skip transaction for POST /service/token by @liubin in https://github.com/goharbor/harbor/pull/19339
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/19915
### Component updates ⬆️
* Bump github.com/go-openapi/errors from 0.19.6 to 0.20.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19697
* bump golang 1.21.5 & fix golangci-lint error by @MinerYang in https://github.com/goharbor/harbor/pull/19722
* Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19729
* Bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19701
* Bump github.com/prometheus/client_golang from 1.14.0 to 1.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19699
* Bump github.com/bmatcuk/doublestar from 1.1.1 to 1.3.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19698
* Fix project metadata validate bug by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19746
* Bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.45.0 to 0.46.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19727
* add description in scanner page by @ShengqiWang in https://github.com/goharbor/harbor/pull/19733
* Fix OpenAPI Specification structural error by @blueswen in https://github.com/goharbor/harbor/pull/19782
* update project-SelectScanner modal Default field css by @ShengqiWang in https://github.com/goharbor/harbor/pull/19753
* Bump up PostgreSQL from 14 to 15 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19789
* fix invalid links in harbor.yml.tmpl by @microyahoo in https://github.com/goharbor/harbor/pull/19786
* Bump golang.org/x/time from 0.4.0 to 0.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19767
* Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19766
* Bump github.com/cloudevents/sdk-go/v2 from 2.13.0 to 2.14.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19764
* Add quota permissions to robot account by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19799
* Bump gopkg.in/h2non/gock.v1 from 1.0.16 to 1.1.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19765
* Bump github.com/go-openapi/runtime from 0.19.20 to 0.26.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19763
* add repository read permission to limitedGuest by @tpoxa in https://github.com/goharbor/harbor/pull/19757
* registryctl/api/registry/blob: fix dropped test error by @alrs in https://github.com/goharbor/harbor/pull/19721
* Remove robot account update quota permission by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19819
* Cache image list with digest key by @stonezdj in https://github.com/goharbor/harbor/pull/19801
* Add verification that robot account duration is not 0 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19829
* fix artifact page bug by @ShengqiWang in https://github.com/goharbor/harbor/pull/19807
* Log ensureArtifact ConflictErr by @LiuShuaiyi in https://github.com/goharbor/harbor/pull/19294
* Fixing typo for About UI by @hasonhai in https://github.com/goharbor/harbor/pull/19840
* Update isValidDuration function by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19843
* fix label select bugs by @ShengqiWang in https://github.com/goharbor/harbor/pull/19850
* Bump k8s.io/client-go from 0.26.2 to 0.29.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19813
* Bump github.com/vmihailenco/msgpack/v5 from 5.0.0-rc.2 to 5.4.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19810
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19809
* feat: add auto_sbom_generation for SBOM auto generation on pushing a … by @zyyw in https://github.com/goharbor/harbor/pull/19869
* add v6 port for nginx and portal config by @MinerYang in https://github.com/goharbor/harbor/pull/19868
* add ip_family config in harbor.yml by @MinerYang in https://github.com/goharbor/harbor/pull/19934
* Bump github.com/aws/aws-sdk-go from 1.34.28 to 1.50.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19920
* Bump github.com/go-openapi/errors from 0.20.4 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19890
* Bump github.com/go-ldap/ldap/v3 from 3.2.4 to 3.4.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19889
* Bump vite and @angular-devkit/build-angular in /src/portal by @dependabot in https://github.com/goharbor/harbor/pull/19945
* remove ipfamily config migrate jinja in 2.9 and 2.10 by @MinerYang in https://github.com/goharbor/harbor/pull/19949
* feat: enable configuration of skip_java_db_update by @zyyw in https://github.com/goharbor/harbor/pull/19996
* [Token/JWT] Update to golang-jwt v5.2.0 by @an-toine in https://github.com/goharbor/harbor/pull/19802
* Remove redundant file package-lock.json under src folder by @AllForNothing in https://github.com/goharbor/harbor/pull/20007
* Limit url to local site by @stonezdj in https://github.com/goharbor/harbor/pull/20013
* Bump go.opentelemetry.io/otel from 1.21.0 to 1.23.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19972
* Bump github.com/go-openapi/strfmt from 0.21.8 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19955
* Bump github.com/google/uuid from 1.3.1 to 1.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19954
* Limit url to local path by @stonezdj in https://github.com/goharbor/harbor/pull/20025
* Bump helm.sh/helm/v3 from 3.11.3 to 3.14.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20017
* Bump github.com/aws/aws-sdk-go from 1.50.5 to 1.50.24 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20018
* Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in https://github.com/goharbor/harbor/pull/19914
* Check if the internal_tls_config is not null when get strong_ssl_ciph… by @stonezdj in https://github.com/goharbor/harbor/pull/20032
* add sbom settings for project by @wy65701436 in https://github.com/goharbor/harbor/pull/20069
* update referrers api by @wy65701436 in https://github.com/goharbor/harbor/pull/20068
* fix: typos by @testwill in https://github.com/goharbor/harbor/pull/20106
* Update swagger.yaml bad request permission: helm-chart:read by @jm-nab in https://github.com/goharbor/harbor/pull/20094
* Update support for artifactType for both manifest and index by @MinerYang in https://github.com/goharbor/harbor/pull/20030
* Update deletion for index type of accessory by @MinerYang in https://github.com/goharbor/harbor/pull/20073
* add type for scanner metadata by @wy65701436 in https://github.com/goharbor/harbor/pull/20108
* panic due to mark retention task error by @stonezdj in https://github.com/goharbor/harbor/pull/20161
* chore: fix function names by @majorteach in https://github.com/goharbor/harbor/pull/20159
* ScanAll should only log an error when an error occurs by @twhiteman in https://github.com/goharbor/harbor/pull/20087
* Bump github.com/tencentcloud/tencentcloud-sdk-go from 1.0.62 to 3.0.233+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20035
* Bump golang.org/x/sync from 0.3.0 to 0.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20036
* Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20104
* Bump github.com/cloudevents/sdk-go/v2 from 2.14.0 to 2.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20099
* Bump golang.org/x/net from 0.17.0 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20113
* Bump github.com/jackc/pgx/v4 from 4.18.1 to 4.18.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20139
* Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20124
* Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20147
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20037
* fix image name extraction by @tkatkov in https://github.com/goharbor/harbor/pull/18992
* fix: typo by @testwill in https://github.com/goharbor/harbor/pull/20190
* bump golang 1.21.8 on main by @MinerYang in https://github.com/goharbor/harbor/pull/20197
* fix: close file by @testwill in https://github.com/goharbor/harbor/pull/20189
* Update GenAccessoryArt API to generate valid accessory for SBOM by @stonezdj in https://github.com/goharbor/harbor/pull/20214
* fix: test robot account permission by @zyyw in https://github.com/goharbor/harbor/pull/20240
* update artifact_type column alteration by @MinerYang in https://github.com/goharbor/harbor/pull/20239
* Allow empty path in redirect_url by @stonezdj in https://github.com/goharbor/harbor/pull/20238
* fix: close blob io ReadCloser by @testwill in https://github.com/goharbor/harbor/pull/20225
* add stop sbom scanning API by @wy65701436 in https://github.com/goharbor/harbor/pull/20200
* update referrer manifest descriptor size by @MinerYang in https://github.com/goharbor/harbor/pull/20207
* adopt cosign with oci-spec 1.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20245
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/20179
* feat: expose `trivy.timeout` to configure the duration to wait for scan completion by @zyyw in https://github.com/goharbor/harbor/pull/20257
* bump golang to 1.22.2 by @MinerYang in https://github.com/goharbor/harbor/pull/20256
* Bump k8s.io/api from 0.29.0 to 0.29.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20205
* Bump github.com/coreos/go-oidc/v3 from 3.9.0 to 3.10.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20202
* Bump golang.org/x/oauth2 from 0.15.0 to 0.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20247
* Sending signals by closing the channel by @Iceber in https://github.com/goharbor/harbor/pull/17917
* Bump go.uber.org/ratelimit from 0.2.0 to 0.3.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20204
* fix: update the image reference format for audit log when pulling image by @zyyw in https://github.com/goharbor/harbor/pull/20278
* fix issue 20269 by @wy65701436 in https://github.com/goharbor/harbor/pull/20274
* fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.31.0 by @zyyw in https://github.com/goharbor/harbor/pull/20285
* Rename scan request type by @stonezdj in https://github.com/goharbor/harbor/pull/20288
* skip to log scan sbom accessory for sbom accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20290
* refactor: update controller.go by @eltociear in https://github.com/goharbor/harbor/pull/20297
* SBOM UI feature implementation by @xuelichao in https://github.com/goharbor/harbor/pull/19946
* Allow generate sbom in proxy cache project by @stonezdj in https://github.com/goharbor/harbor/pull/20298
* Add enableCapabilities to extraAttrs for stop by @stonezdj in https://github.com/goharbor/harbor/pull/20299
* Set default capability for old scanners by @stonezdj in https://github.com/goharbor/harbor/pull/20306
* Wrong values shown for the columns of support_sbom and support_vulnerability in scanner list by @xuelichao in https://github.com/goharbor/harbor/pull/20308
* add prepare migration script for 2.11.0 by @MinerYang in https://github.com/goharbor/harbor/pull/20315
* Log and skip adapter ping error when retrieve adapter capability by @stonezdj in https://github.com/goharbor/harbor/pull/20314
* Add 422 in the swagger.yaml by @stonezdj in https://github.com/goharbor/harbor/pull/20344
* fix: update image reference to \@\ in audit log when pushing & deleting images by @zyyw in https://github.com/goharbor/harbor/pull/20348
* Add scanner info and report_id to sbom_overview on listing artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20358
* Fix UI bugs by @xuelichao in https://github.com/goharbor/harbor/pull/20364
* Delete scan_report when accessory is removed by @stonezdj in https://github.com/goharbor/harbor/pull/20365
* Bump golang.org/x/net from 0.22.0 to 0.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20318
* Bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20317
* Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20370
* Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20316
* Add scan type in webhook event by @stonezdj in https://github.com/goharbor/harbor/pull/20363
* do not delete accessory relationship while still referenced by @MinerYang in https://github.com/goharbor/harbor/pull/20360
* Rename harbor.sbom to sbom.harbor by @stonezdj in https://github.com/goharbor/harbor/pull/20359
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20374
* Bump k8s.io/api from 0.29.3 to 0.30.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20375
* Bump github.com/gorilla/csrf from 1.6.2 to 1.7.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20376
* Bump github.com/go-asn1-ber/asn1-ber from 1.5.5 to 1.5.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20372
* Bump helm.sh/helm/v3 from 3.14.2 to 3.14.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20373
* fix update TRIVYVERSION=v0.50.4 & TRIVYADAPTERVERSION=v0.31.1 by @zyyw in https://github.com/goharbor/harbor/pull/20390
* fix: enale stop_scan for ci by @zyyw in https://github.com/goharbor/harbor/pull/20378
* Update scan job request log for enabled_capabilities by @MinerYang in https://github.com/goharbor/harbor/pull/20414
* fix issue 20407 by @wy65701436 in https://github.com/goharbor/harbor/pull/20416
* Skip scan in-toto sbom artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20415
* fix issue 19928 by @wy65701436 in https://github.com/goharbor/harbor/pull/20409
* chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20397
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.46.1 to 0.51.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20394
* chore(deps): bump github.com/go-openapi/strfmt from 0.22.0 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20396
* add membership=true back for gitlab replication adapter by @zyyw in https://github.com/goharbor/harbor/pull/20400
* Display status in sbom_overview for image index by @stonezdj in https://github.com/goharbor/harbor/pull/20425
* Add additional link for sboms by @stonezdj in https://github.com/goharbor/harbor/pull/20423
* bump golang 1.22.3 by @MinerYang in https://github.com/goharbor/harbor/pull/20433
* Initialize execution Manager in Report Assembler by @stonezdj in https://github.com/goharbor/harbor/pull/20437
* Fix-20459 Wrong sbom status displayed in UI by @xuelichao in https://github.com/goharbor/harbor/pull/20464
* bump up trivy and trivy-adapter version by @zyyw in https://github.com/goharbor/harbor/pull/20468
* [cherry-pick] Add sbom_report table to store sbom related information by @stonezdj in https://github.com/goharbor/harbor/pull/20482
* [cherry-pick] Separate the execution vendor type sbom from image_scan by @stonezdj in https://github.com/goharbor/harbor/pull/20508
* [cherry-pick] Fix tooltip issue related to SBOM.Details by @stonezdj in https://github.com/goharbor/harbor/pull/20511
* [cherry-pick] fix 20496 by @wy65701436 in https://github.com/goharbor/harbor/pull/20509
* tls support for pushing sbom by @wy65701436 in https://github.com/goharbor/harbor/pull/20515
* [cherry-pick] fix 20518 by @wy65701436 in https://github.com/goharbor/harbor/pull/20522
* [cherry-pick] fix http client to push sbom accessory by @wy65701436 in https://github.com/goharbor/harbor/pull/20528
* [cherry-pick] Response an error message when there is incomplete sbom generate job by @stonezdj in https://github.com/goharbor/harbor/pull/20527
* [cherry-pick] No sbom_overview when sbom is deleted by @stonezdj in https://github.com/goharbor/harbor/pull/20534
* Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in https://github.com/goharbor/harbor/pull/20539
* [cherry-pick] Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in https://github.com/goharbor/harbor/pull/20546
### Docs update 🗄️
* Fix docker version to 20.10.10 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19751
* revise the tags of Interrogation Services by @xuelichao in https://github.com/goharbor/harbor/pull/20049
* Add two columns to display capability type for scanner by @xuelichao in https://github.com/goharbor/harbor/pull/20111
### Other Changes
* Bump actions/stale from 8.0.0 to 9.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19689
* Update Robot Account Test Case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19710
* Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/goharbor/harbor/pull/19714
* Bump google-github-actions/setup-gcloud from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/19696
* Add notation replication test case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19738
* Add multi-tier accessory replication test cases by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19730
* Add quota permissions testcase by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19822
* deprecate gosec in makefile by @wy65701436 in https://github.com/goharbor/harbor/pull/19828
* Bump kentaro-m/auto-assign-action from 1.2.5 to 1.2.6 by @dependabot in https://github.com/goharbor/harbor/pull/19824
* Update replication rule filter label xpath by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19895
* fix: cve export label filter xpath by @zyyw in https://github.com/goharbor/harbor/pull/19931
* add UI test for project quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/19935
* Bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/goharbor/harbor/pull/19936
* Bump kentaro-m/auto-assign-action from 1.2.6 to 2.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19929
* update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in https://github.com/goharbor/harbor/pull/19959
* fix: scanner tab change by @zyyw in https://github.com/goharbor/harbor/pull/20128
* Bump softprops/action-gh-release from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/20115
* delete membership=0 in getProjectsByName by @prima101112 in https://github.com/goharbor/harbor/pull/20153
* feat: add api test case for quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/20209
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20223
* feat: add test case for customizing OIDC provider name by @zyyw in https://github.com/goharbor/harbor/pull/20287
* feat: add tc for limited guest of a project to get repository by @zyyw in https://github.com/goharbor/harbor/pull/20311
* fix: fresh scanner list when updating scanner by @zyyw in https://github.com/goharbor/harbor/pull/20366
* fix: update nightly test case for verifying audit log of image digest by @zyyw in https://github.com/goharbor/harbor/pull/20354
* fix: update to

v2.11.0-rc3 (2024-06-06)



## Known issue
- [known issue #20056](https://github.com/goharbor/harbor/issues/20056) requires a user to be a member of a project in the source (GitLab) registry when doing pull-based replication from GitLab registry to Harbor registry. Even if it is a public project in GitLab registry, a user has to be a member of that project and then performs replication. Affected versions are v2.10.x, v2.9.x.

## What's Changed
### Exciting New Features 🎉
#### SBOM Generation and Management:
 Harbor now provides robust support for generating Software Bill of Materials (SBOM) either manually or automatically. Users can conveniently view, download, and replicate SBOMs across different instances of Harbor.

#### Supporting OCI Distribution Spec v1.1.0 🎉
Harbor now fully supports [OCI Distribution Spec v1.1.0](https://github.com/opencontainers/distribution-spec/tree/v1.1.0)

#### Integration with VolcEngine Registry: 
Users can now seamlessly replicate images to and from the VolcEngine registry, enhancing interoperability and flexibility within the Harbor ecosystem.

#### Korean UI Translation: 
The user interface of Harbor has been enriched with the addition of Korean language support, ensuring a more inclusive and accessible experience for Korean-speaking users.


### Enhancement 🚀
* skip transaction for POST /service/token by @liubin in https://github.com/goharbor/harbor/pull/19339
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/19915
### Component updates ⬆️
* Bump github.com/go-openapi/errors from 0.19.6 to 0.20.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19697
* bump golang 1.21.5 & fix golangci-lint error by @MinerYang in https://github.com/goharbor/harbor/pull/19722
* Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19729
* Bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19701
* Bump github.com/prometheus/client_golang from 1.14.0 to 1.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19699
* Bump github.com/bmatcuk/doublestar from 1.1.1 to 1.3.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19698
* Fix project metadata validate bug by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19746
* Bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.45.0 to 0.46.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19727
* add description in scanner page by @ShengqiWang in https://github.com/goharbor/harbor/pull/19733
* Fix OpenAPI Specification structural error by @blueswen in https://github.com/goharbor/harbor/pull/19782
* update project-SelectScanner modal Default field css by @ShengqiWang in https://github.com/goharbor/harbor/pull/19753
* Bump up PostgreSQL from 14 to 15 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19789
* fix invalid links in harbor.yml.tmpl by @microyahoo in https://github.com/goharbor/harbor/pull/19786
* Bump golang.org/x/time from 0.4.0 to 0.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19767
* Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19766
* Bump github.com/cloudevents/sdk-go/v2 from 2.13.0 to 2.14.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19764
* Add quota permissions to robot account by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19799
* Bump gopkg.in/h2non/gock.v1 from 1.0.16 to 1.1.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19765
* Bump github.com/go-openapi/runtime from 0.19.20 to 0.26.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19763
* add repository read permission to limitedGuest by @tpoxa in https://github.com/goharbor/harbor/pull/19757
* registryctl/api/registry/blob: fix dropped test error by @alrs in https://github.com/goharbor/harbor/pull/19721
* Remove robot account update quota permission by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19819
* Cache image list with digest key by @stonezdj in https://github.com/goharbor/harbor/pull/19801
* Add verification that robot account duration is not 0 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19829
* fix artifact page bug by @ShengqiWang in https://github.com/goharbor/harbor/pull/19807
* Log ensureArtifact ConflictErr by @LiuShuaiyi in https://github.com/goharbor/harbor/pull/19294
* Fixing typo for About UI by @hasonhai in https://github.com/goharbor/harbor/pull/19840
* Update isValidDuration function by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19843
* fix label select bugs by @ShengqiWang in https://github.com/goharbor/harbor/pull/19850
* Bump k8s.io/client-go from 0.26.2 to 0.29.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19813
* Bump github.com/vmihailenco/msgpack/v5 from 5.0.0-rc.2 to 5.4.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19810
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19809
* feat: add auto_sbom_generation for SBOM auto generation on pushing a … by @zyyw in https://github.com/goharbor/harbor/pull/19869
* add v6 port for nginx and portal config by @MinerYang in https://github.com/goharbor/harbor/pull/19868
* add ip_family config in harbor.yml by @MinerYang in https://github.com/goharbor/harbor/pull/19934
* Bump github.com/aws/aws-sdk-go from 1.34.28 to 1.50.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19920
* Bump github.com/go-openapi/errors from 0.20.4 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19890
* Bump github.com/go-ldap/ldap/v3 from 3.2.4 to 3.4.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19889
* Bump vite and @angular-devkit/build-angular in /src/portal by @dependabot in https://github.com/goharbor/harbor/pull/19945
* remove ipfamily config migrate jinja in 2.9 and 2.10 by @MinerYang in https://github.com/goharbor/harbor/pull/19949
* feat: enable configuration of skip_java_db_update by @zyyw in https://github.com/goharbor/harbor/pull/19996
* [Token/JWT] Update to golang-jwt v5.2.0 by @an-toine in https://github.com/goharbor/harbor/pull/19802
* Remove redundant file package-lock.json under src folder by @AllForNothing in https://github.com/goharbor/harbor/pull/20007
* Limit url to local site by @stonezdj in https://github.com/goharbor/harbor/pull/20013
* Bump go.opentelemetry.io/otel from 1.21.0 to 1.23.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19972
* Bump github.com/go-openapi/strfmt from 0.21.8 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19955
* Bump github.com/google/uuid from 1.3.1 to 1.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19954
* Limit url to local path by @stonezdj in https://github.com/goharbor/harbor/pull/20025
* Bump helm.sh/helm/v3 from 3.11.3 to 3.14.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20017
* Bump github.com/aws/aws-sdk-go from 1.50.5 to 1.50.24 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20018
* Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in https://github.com/goharbor/harbor/pull/19914
* Check if the internal_tls_config is not null when get strong_ssl_ciph… by @stonezdj in https://github.com/goharbor/harbor/pull/20032
* add sbom settings for project by @wy65701436 in https://github.com/goharbor/harbor/pull/20069
* update referrers api by @wy65701436 in https://github.com/goharbor/harbor/pull/20068
* fix: typos by @testwill in https://github.com/goharbor/harbor/pull/20106
* Update swagger.yaml bad request permission: helm-chart:read by @jm-nab in https://github.com/goharbor/harbor/pull/20094
* Update support for artifactType for both manifest and index by @MinerYang in https://github.com/goharbor/harbor/pull/20030
* Update deletion for index type of accessory by @MinerYang in https://github.com/goharbor/harbor/pull/20073
* add type for scanner metadata by @wy65701436 in https://github.com/goharbor/harbor/pull/20108
* panic due to mark retention task error by @stonezdj in https://github.com/goharbor/harbor/pull/20161
* chore: fix function names by @majorteach in https://github.com/goharbor/harbor/pull/20159
* ScanAll should only log an error when an error occurs by @twhiteman in https://github.com/goharbor/harbor/pull/20087
* Bump github.com/tencentcloud/tencentcloud-sdk-go from 1.0.62 to 3.0.233+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20035
* Bump golang.org/x/sync from 0.3.0 to 0.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20036
* Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20104
* Bump github.com/cloudevents/sdk-go/v2 from 2.14.0 to 2.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20099
* Bump golang.org/x/net from 0.17.0 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20113
* Bump github.com/jackc/pgx/v4 from 4.18.1 to 4.18.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20139
* Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20124
* Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20147
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20037
* fix image name extraction by @tkatkov in https://github.com/goharbor/harbor/pull/18992
* fix: typo by @testwill in https://github.com/goharbor/harbor/pull/20190
* bump golang 1.21.8 on main by @MinerYang in https://github.com/goharbor/harbor/pull/20197
* fix: close file by @testwill in https://github.com/goharbor/harbor/pull/20189
* Update GenAccessoryArt API to generate valid accessory for SBOM by @stonezdj in https://github.com/goharbor/harbor/pull/20214
* fix: test robot account permission by @zyyw in https://github.com/goharbor/harbor/pull/20240
* update artifact_type column alteration by @MinerYang in https://github.com/goharbor/harbor/pull/20239
* Allow empty path in redirect_url by @stonezdj in https://github.com/goharbor/harbor/pull/20238
* fix: close blob io ReadCloser by @testwill in https://github.com/goharbor/harbor/pull/20225
* add stop sbom scanning API by @wy65701436 in https://github.com/goharbor/harbor/pull/20200
* update referrer manifest descriptor size by @MinerYang in https://github.com/goharbor/harbor/pull/20207
* adopt cosign with oci-spec 1.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20245
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/20179
* feat: expose `trivy.timeout` to configure the duration to wait for scan completion by @zyyw in https://github.com/goharbor/harbor/pull/20257
* bump golang to 1.22.2 by @MinerYang in https://github.com/goharbor/harbor/pull/20256
* Bump k8s.io/api from 0.29.0 to 0.29.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20205
* Bump github.com/coreos/go-oidc/v3 from 3.9.0 to 3.10.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20202
* Bump golang.org/x/oauth2 from 0.15.0 to 0.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20247
* Sending signals by closing the channel by @Iceber in https://github.com/goharbor/harbor/pull/17917
* Bump go.uber.org/ratelimit from 0.2.0 to 0.3.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20204
* fix: update the image reference format for audit log when pulling image by @zyyw in https://github.com/goharbor/harbor/pull/20278
* fix issue 20269 by @wy65701436 in https://github.com/goharbor/harbor/pull/20274
* fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.31.0 by @zyyw in https://github.com/goharbor/harbor/pull/20285
* Rename scan request type by @stonezdj in https://github.com/goharbor/harbor/pull/20288
* skip to log scan sbom accessory for sbom accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20290
* refactor: update controller.go by @eltociear in https://github.com/goharbor/harbor/pull/20297
* SBOM UI feature implementation by @xuelichao in https://github.com/goharbor/harbor/pull/19946
* Allow generate sbom in proxy cache project by @stonezdj in https://github.com/goharbor/harbor/pull/20298
* Add enableCapabilities to extraAttrs for stop by @stonezdj in https://github.com/goharbor/harbor/pull/20299
* Set default capability for old scanners by @stonezdj in https://github.com/goharbor/harbor/pull/20306
* Wrong values shown for the columns of support_sbom and support_vulnerability in scanner list by @xuelichao in https://github.com/goharbor/harbor/pull/20308
* add prepare migration script for 2.11.0 by @MinerYang in https://github.com/goharbor/harbor/pull/20315
* Log and skip adapter ping error when retrieve adapter capability by @stonezdj in https://github.com/goharbor/harbor/pull/20314
* Add 422 in the swagger.yaml by @stonezdj in https://github.com/goharbor/harbor/pull/20344
* fix: update image reference to \@\ in audit log when pushing & deleting images by @zyyw in https://github.com/goharbor/harbor/pull/20348
* Add scanner info and report_id to sbom_overview on listing artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20358
* Fix UI bugs by @xuelichao in https://github.com/goharbor/harbor/pull/20364
* Delete scan_report when accessory is removed by @stonezdj in https://github.com/goharbor/harbor/pull/20365
* Bump golang.org/x/net from 0.22.0 to 0.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20318
* Bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20317
* Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20370
* Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20316
* Add scan type in webhook event by @stonezdj in https://github.com/goharbor/harbor/pull/20363
* do not delete accessory relationship while still referenced by @MinerYang in https://github.com/goharbor/harbor/pull/20360
* Rename harbor.sbom to sbom.harbor by @stonezdj in https://github.com/goharbor/harbor/pull/20359
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20374
* Bump k8s.io/api from 0.29.3 to 0.30.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20375
* Bump github.com/gorilla/csrf from 1.6.2 to 1.7.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20376
* Bump github.com/go-asn1-ber/asn1-ber from 1.5.5 to 1.5.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20372
* Bump helm.sh/helm/v3 from 3.14.2 to 3.14.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20373
* fix update TRIVYVERSION=v0.50.4 & TRIVYADAPTERVERSION=v0.31.1 by @zyyw in https://github.com/goharbor/harbor/pull/20390
* fix: enale stop_scan for ci by @zyyw in https://github.com/goharbor/harbor/pull/20378
* Update scan job request log for enabled_capabilities by @MinerYang in https://github.com/goharbor/harbor/pull/20414
* fix issue 20407 by @wy65701436 in https://github.com/goharbor/harbor/pull/20416
* Skip scan in-toto sbom artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20415
* fix issue 19928 by @wy65701436 in https://github.com/goharbor/harbor/pull/20409
* chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20397
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.46.1 to 0.51.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20394
* chore(deps): bump github.com/go-openapi/strfmt from 0.22.0 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20396
* add membership=true back for gitlab replication adapter by @zyyw in https://github.com/goharbor/harbor/pull/20400
* Display status in sbom_overview for image index by @stonezdj in https://github.com/goharbor/harbor/pull/20425
* Add additional link for sboms by @stonezdj in https://github.com/goharbor/harbor/pull/20423
* bump golang 1.22.3 by @MinerYang in https://github.com/goharbor/harbor/pull/20433
* Initialize execution Manager in Report Assembler by @stonezdj in https://github.com/goharbor/harbor/pull/20437
* Fix-20459 Wrong sbom status displayed in UI by @xuelichao in https://github.com/goharbor/harbor/pull/20464
* bump up trivy and trivy-adapter version by @zyyw in https://github.com/goharbor/harbor/pull/20468
* [cherry-pick] Add sbom_report table to store sbom related information by @stonezdj in https://github.com/goharbor/harbor/pull/20482
* [cherry-pick] Separate the execution vendor type sbom from image_scan by @stonezdj in https://github.com/goharbor/harbor/pull/20508
* [cherry-pick] Fix tooltip issue related to SBOM.Details by @stonezdj in https://github.com/goharbor/harbor/pull/20511
* [cherry-pick] fix 20496 by @wy65701436 in https://github.com/goharbor/harbor/pull/20509
* tls support for pushing sbom by @wy65701436 in https://github.com/goharbor/harbor/pull/20515
* [cherry-pick] fix 20518 by @wy65701436 in https://github.com/goharbor/harbor/pull/20522
* [cherry-pick] fix http client to push sbom accessory by @wy65701436 in https://github.com/goharbor/harbor/pull/20528
* [cherry-pick] Response an error message when there is incomplete sbom generate job by @stonezdj in https://github.com/goharbor/harbor/pull/20527
* [cherry-pick] No sbom_overview when sbom is deleted by @stonezdj in https://github.com/goharbor/harbor/pull/20534
* Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in https://github.com/goharbor/harbor/pull/20539
* [cherry-pick] Adjust the query by UUID sql so that it can use the idx_task_extra_at… by @stonezdj in https://github.com/goharbor/harbor/pull/20546
### Docs update 🗄️
* Fix docker version to 20.10.10 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19751
* revise the tags of Interrogation Services by @xuelichao in https://github.com/goharbor/harbor/pull/20049
* Add two columns to display capability type for scanner by @xuelichao in https://github.com/goharbor/harbor/pull/20111
### Other Changes
* Bump actions/stale from 8.0.0 to 9.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19689
* Update Robot Account Test Case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19710
* Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/goharbor/harbor/pull/19714
* Bump google-github-actions/setup-gcloud from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/19696
* Add notation replication test case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19738
* Add multi-tier accessory replication test cases by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19730
* Add quota permissions testcase by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19822
* deprecate gosec in makefile by @wy65701436 in https://github.com/goharbor/harbor/pull/19828
* Bump kentaro-m/auto-assign-action from 1.2.5 to 1.2.6 by @dependabot in https://github.com/goharbor/harbor/pull/19824
* Update replication rule filter label xpath by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19895
* fix: cve export label filter xpath by @zyyw in https://github.com/goharbor/harbor/pull/19931
* add UI test for project quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/19935
* Bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/goharbor/harbor/pull/19936
* Bump kentaro-m/auto-assign-action from 1.2.6 to 2.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19929
* update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in https://github.com/goharbor/harbor/pull/19959
* fix: scanner tab change by @zyyw in https://github.com/goharbor/harbor/pull/20128
* Bump softprops/action-gh-release from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/20115
* delete membership=0 in getProjectsByName by @prima101112 in https://github.com/goharbor/harbor/pull/20153
* feat: add api test case for quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/20209
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20223
* feat: add test case for customizing OIDC provider name by @zyyw in https://github.com/goharbor/harbor/pull/20287
* feat: add tc for limited guest of a project to get repository by @zyyw in https://github.com/goharbor/harbor/pull/20311
* fix: fresh scanner list when updating scanner by @zyyw in https://github.com/goharbor/harbor/pull/20366
* fix: update nightly test case for verifying audit log of image digest by @zyyw in https://github.com/goharbor/harbor/pull/20354
* fix: update to

v2.11.0-rc2 (2024-06-04)



## Known issue
- [known issue #20056](https://github.com/goharbor/harbor/issues/20056) requires a user to be a member of a project in the source (GitLab) registry when doing pull-based replication from GitLab registry to Harbor registry. Even if it is a public project in GitLab registry, a user has to be a member of that project and then performs replication. Affected versions are v2.10.x, v2.9.x.

## What's Changed
### Exciting New Features 🎉
#### SBOM Generation and Management:
 Harbor now provides robust support for generating Software Bill of Materials (SBOM) either manually or automatically. Users can conveniently view, download, and replicate SBOMs across different instances of Harbor.

#### Supporting OCI Distribution Spec v1.1.0 🎉
Harbor now fully supports [OCI Distribution Spec v1.1.0](https://github.com/opencontainers/distribution-spec/tree/v1.1.0)

#### Integration with VolcEngine Registry: 
Users can now seamlessly replicate images to and from the VolcEngine registry, enhancing interoperability and flexibility within the Harbor ecosystem.

#### Korean UI Translation: 
The user interface of Harbor has been enriched with the addition of Korean language support, ensuring a more inclusive and accessible experience for Korean-speaking users.


### Enhancement 🚀
* skip transaction for POST /service/token by @liubin in https://github.com/goharbor/harbor/pull/19339
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/19915
### Component updates ⬆️
* Bump github.com/go-openapi/errors from 0.19.6 to 0.20.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19697
* bump golang 1.21.5 & fix golangci-lint error by @MinerYang in https://github.com/goharbor/harbor/pull/19722
* Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19729
* Bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19701
* Bump github.com/prometheus/client_golang from 1.14.0 to 1.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19699
* Bump github.com/bmatcuk/doublestar from 1.1.1 to 1.3.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19698
* Fix project metadata validate bug by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19746
* Bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.45.0 to 0.46.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19727
* add description in scanner page by @ShengqiWang in https://github.com/goharbor/harbor/pull/19733
* Fix OpenAPI Specification structural error by @blueswen in https://github.com/goharbor/harbor/pull/19782
* update project-SelectScanner modal Default field css by @ShengqiWang in https://github.com/goharbor/harbor/pull/19753
* Bump up PostgreSQL from 14 to 15 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19789
* fix invalid links in harbor.yml.tmpl by @microyahoo in https://github.com/goharbor/harbor/pull/19786
* Bump golang.org/x/time from 0.4.0 to 0.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19767
* Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19766
* Bump github.com/cloudevents/sdk-go/v2 from 2.13.0 to 2.14.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19764
* Add quota permissions to robot account by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19799
* Bump gopkg.in/h2non/gock.v1 from 1.0.16 to 1.1.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19765
* Bump github.com/go-openapi/runtime from 0.19.20 to 0.26.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19763
* add repository read permission to limitedGuest by @tpoxa in https://github.com/goharbor/harbor/pull/19757
* registryctl/api/registry/blob: fix dropped test error by @alrs in https://github.com/goharbor/harbor/pull/19721
* Remove robot account update quota permission by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19819
* Cache image list with digest key by @stonezdj in https://github.com/goharbor/harbor/pull/19801
* Add verification that robot account duration is not 0 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19829
* fix artifact page bug by @ShengqiWang in https://github.com/goharbor/harbor/pull/19807
* Log ensureArtifact ConflictErr by @LiuShuaiyi in https://github.com/goharbor/harbor/pull/19294
* Fixing typo for About UI by @hasonhai in https://github.com/goharbor/harbor/pull/19840
* Update isValidDuration function by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19843
* fix label select bugs by @ShengqiWang in https://github.com/goharbor/harbor/pull/19850
* Bump k8s.io/client-go from 0.26.2 to 0.29.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19813
* Bump github.com/vmihailenco/msgpack/v5 from 5.0.0-rc.2 to 5.4.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19810
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19809
* feat: add auto_sbom_generation for SBOM auto generation on pushing a … by @zyyw in https://github.com/goharbor/harbor/pull/19869
* add v6 port for nginx and portal config by @MinerYang in https://github.com/goharbor/harbor/pull/19868
* add ip_family config in harbor.yml by @MinerYang in https://github.com/goharbor/harbor/pull/19934
* Bump github.com/aws/aws-sdk-go from 1.34.28 to 1.50.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19920
* Bump github.com/go-openapi/errors from 0.20.4 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19890
* Bump github.com/go-ldap/ldap/v3 from 3.2.4 to 3.4.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19889
* Bump vite and @angular-devkit/build-angular in /src/portal by @dependabot in https://github.com/goharbor/harbor/pull/19945
* remove ipfamily config migrate jinja in 2.9 and 2.10 by @MinerYang in https://github.com/goharbor/harbor/pull/19949
* feat: enable configuration of skip_java_db_update by @zyyw in https://github.com/goharbor/harbor/pull/19996
* [Token/JWT] Update to golang-jwt v5.2.0 by @an-toine in https://github.com/goharbor/harbor/pull/19802
* Remove redundant file package-lock.json under src folder by @AllForNothing in https://github.com/goharbor/harbor/pull/20007
* Limit url to local site by @stonezdj in https://github.com/goharbor/harbor/pull/20013
* Bump go.opentelemetry.io/otel from 1.21.0 to 1.23.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19972
* Bump github.com/go-openapi/strfmt from 0.21.8 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19955
* Bump github.com/google/uuid from 1.3.1 to 1.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19954
* Limit url to local path by @stonezdj in https://github.com/goharbor/harbor/pull/20025
* Bump helm.sh/helm/v3 from 3.11.3 to 3.14.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20017
* Bump github.com/aws/aws-sdk-go from 1.50.5 to 1.50.24 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20018
* Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in https://github.com/goharbor/harbor/pull/19914
* Check if the internal_tls_config is not null when get strong_ssl_ciph… by @stonezdj in https://github.com/goharbor/harbor/pull/20032
* add sbom settings for project by @wy65701436 in https://github.com/goharbor/harbor/pull/20069
* update referrers api by @wy65701436 in https://github.com/goharbor/harbor/pull/20068
* fix: typos by @testwill in https://github.com/goharbor/harbor/pull/20106
* Update swagger.yaml bad request permission: helm-chart:read by @jm-nab in https://github.com/goharbor/harbor/pull/20094
* Update support for artifactType for both manifest and index by @MinerYang in https://github.com/goharbor/harbor/pull/20030
* Update deletion for index type of accessory by @MinerYang in https://github.com/goharbor/harbor/pull/20073
* add type for scanner metadata by @wy65701436 in https://github.com/goharbor/harbor/pull/20108
* panic due to mark retention task error by @stonezdj in https://github.com/goharbor/harbor/pull/20161
* chore: fix function names by @majorteach in https://github.com/goharbor/harbor/pull/20159
* ScanAll should only log an error when an error occurs by @twhiteman in https://github.com/goharbor/harbor/pull/20087
* Bump github.com/tencentcloud/tencentcloud-sdk-go from 1.0.62 to 3.0.233+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20035
* Bump golang.org/x/sync from 0.3.0 to 0.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20036
* Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20104
* Bump github.com/cloudevents/sdk-go/v2 from 2.14.0 to 2.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20099
* Bump golang.org/x/net from 0.17.0 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20113
* Bump github.com/jackc/pgx/v4 from 4.18.1 to 4.18.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20139
* Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20124
* Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20147
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20037
* fix image name extraction by @tkatkov in https://github.com/goharbor/harbor/pull/18992
* fix: typo by @testwill in https://github.com/goharbor/harbor/pull/20190
* bump golang 1.21.8 on main by @MinerYang in https://github.com/goharbor/harbor/pull/20197
* fix: close file by @testwill in https://github.com/goharbor/harbor/pull/20189
* Update GenAccessoryArt API to generate valid accessory for SBOM by @stonezdj in https://github.com/goharbor/harbor/pull/20214
* fix: test robot account permission by @zyyw in https://github.com/goharbor/harbor/pull/20240
* update artifact_type column alteration by @MinerYang in https://github.com/goharbor/harbor/pull/20239
* Allow empty path in redirect_url by @stonezdj in https://github.com/goharbor/harbor/pull/20238
* fix: close blob io ReadCloser by @testwill in https://github.com/goharbor/harbor/pull/20225
* add stop sbom scanning API by @wy65701436 in https://github.com/goharbor/harbor/pull/20200
* update referrer manifest descriptor size by @MinerYang in https://github.com/goharbor/harbor/pull/20207
* adopt cosign with oci-spec 1.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20245
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/20179
* feat: expose `trivy.timeout` to configure the duration to wait for scan completion by @zyyw in https://github.com/goharbor/harbor/pull/20257
* bump golang to 1.22.2 by @MinerYang in https://github.com/goharbor/harbor/pull/20256
* Bump k8s.io/api from 0.29.0 to 0.29.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20205
* Bump github.com/coreos/go-oidc/v3 from 3.9.0 to 3.10.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20202
* Bump golang.org/x/oauth2 from 0.15.0 to 0.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20247
* Sending signals by closing the channel by @Iceber in https://github.com/goharbor/harbor/pull/17917
* Bump go.uber.org/ratelimit from 0.2.0 to 0.3.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20204
* fix: update the image reference format for audit log when pulling image by @zyyw in https://github.com/goharbor/harbor/pull/20278
* fix issue 20269 by @wy65701436 in https://github.com/goharbor/harbor/pull/20274
* fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.31.0 by @zyyw in https://github.com/goharbor/harbor/pull/20285
* Rename scan request type by @stonezdj in https://github.com/goharbor/harbor/pull/20288
* skip to log scan sbom accessory for sbom accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20290
* refactor: update controller.go by @eltociear in https://github.com/goharbor/harbor/pull/20297
* SBOM UI feature implementation by @xuelichao in https://github.com/goharbor/harbor/pull/19946
* Allow generate sbom in proxy cache project by @stonezdj in https://github.com/goharbor/harbor/pull/20298
* Add enableCapabilities to extraAttrs for stop by @stonezdj in https://github.com/goharbor/harbor/pull/20299
* Set default capability for old scanners by @stonezdj in https://github.com/goharbor/harbor/pull/20306
* Wrong values shown for the columns of support_sbom and support_vulnerability in scanner list by @xuelichao in https://github.com/goharbor/harbor/pull/20308
* add prepare migration script for 2.11.0 by @MinerYang in https://github.com/goharbor/harbor/pull/20315
* Log and skip adapter ping error when retrieve adapter capability by @stonezdj in https://github.com/goharbor/harbor/pull/20314
* Add 422 in the swagger.yaml by @stonezdj in https://github.com/goharbor/harbor/pull/20344
* fix: update image reference to \@\ in audit log when pushing & deleting images by @zyyw in https://github.com/goharbor/harbor/pull/20348
* Add scanner info and report_id to sbom_overview on listing artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20358
* Fix UI bugs by @xuelichao in https://github.com/goharbor/harbor/pull/20364
* Delete scan_report when accessory is removed by @stonezdj in https://github.com/goharbor/harbor/pull/20365
* Bump golang.org/x/net from 0.22.0 to 0.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20318
* Bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20317
* Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20370
* Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20316
* Add scan type in webhook event by @stonezdj in https://github.com/goharbor/harbor/pull/20363
* do not delete accessory relationship while still referenced by @MinerYang in https://github.com/goharbor/harbor/pull/20360
* Rename harbor.sbom to sbom.harbor by @stonezdj in https://github.com/goharbor/harbor/pull/20359
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20374
* Bump k8s.io/api from 0.29.3 to 0.30.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20375
* Bump github.com/gorilla/csrf from 1.6.2 to 1.7.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20376
* Bump github.com/go-asn1-ber/asn1-ber from 1.5.5 to 1.5.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20372
* Bump helm.sh/helm/v3 from 3.14.2 to 3.14.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20373
* fix update TRIVYVERSION=v0.50.4 & TRIVYADAPTERVERSION=v0.31.1 by @zyyw in https://github.com/goharbor/harbor/pull/20390
* fix: enale stop_scan for ci by @zyyw in https://github.com/goharbor/harbor/pull/20378
* Update scan job request log for enabled_capabilities by @MinerYang in https://github.com/goharbor/harbor/pull/20414
* fix issue 20407 by @wy65701436 in https://github.com/goharbor/harbor/pull/20416
* Skip scan in-toto sbom artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20415
* fix issue 19928 by @wy65701436 in https://github.com/goharbor/harbor/pull/20409
* chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20397
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.46.1 to 0.51.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20394
* chore(deps): bump github.com/go-openapi/strfmt from 0.22.0 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20396
* add membership=true back for gitlab replication adapter by @zyyw in https://github.com/goharbor/harbor/pull/20400
* Display status in sbom_overview for image index by @stonezdj in https://github.com/goharbor/harbor/pull/20425
* Add additional link for sboms by @stonezdj in https://github.com/goharbor/harbor/pull/20423
* bump golang 1.22.3 by @MinerYang in https://github.com/goharbor/harbor/pull/20433
* Initialize execution Manager in Report Assembler by @stonezdj in https://github.com/goharbor/harbor/pull/20437
* Fix-20459 Wrong sbom status displayed in UI by @xuelichao in https://github.com/goharbor/harbor/pull/20464
* bump up trivy and trivy-adapter version by @zyyw in https://github.com/goharbor/harbor/pull/20468
* [cherry-pick] Add sbom_report table to store sbom related information by @stonezdj in https://github.com/goharbor/harbor/pull/20482
* [cherry-pick] Separate the execution vendor type sbom from image_scan by @stonezdj in https://github.com/goharbor/harbor/pull/20508
* [cherry-pick] Fix tooltip issue related to SBOM.Details by @stonezdj in https://github.com/goharbor/harbor/pull/20511
* [cherry-pick] fix 20496 by @wy65701436 in https://github.com/goharbor/harbor/pull/20509
* tls support for pushing sbom by @wy65701436 in https://github.com/goharbor/harbor/pull/20515
* [cherry-pick] fix 20518 by @wy65701436 in https://github.com/goharbor/harbor/pull/20522
* [cherry-pick] fix http client to push sbom accessory by @wy65701436 in https://github.com/goharbor/harbor/pull/20528
* [cherry-pick] Response an error message when there is incomplete sbom generate job by @stonezdj in https://github.com/goharbor/harbor/pull/20527
* [cherry-pick] No sbom_overview when sbom is deleted by @stonezdj in https://github.com/goharbor/harbor/pull/20534
* Fixes-20537 SBOM tab should not exist when the artifact is helm package by @xuelichao in https://github.com/goharbor/harbor/pull/20539
### Docs update 🗄️
* Fix docker version to 20.10.10 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19751
* revise the tags of Interrogation Services by @xuelichao in https://github.com/goharbor/harbor/pull/20049
* Add two columns to display capability type for scanner by @xuelichao in https://github.com/goharbor/harbor/pull/20111
### Other Changes
* Bump actions/stale from 8.0.0 to 9.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19689
* Update Robot Account Test Case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19710
* Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/goharbor/harbor/pull/19714
* Bump google-github-actions/setup-gcloud from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/19696
* Add notation replication test case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19738
* Add multi-tier accessory replication test cases by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19730
* Add quota permissions testcase by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19822
* deprecate gosec in makefile by @wy65701436 in https://github.com/goharbor/harbor/pull/19828
* Bump kentaro-m/auto-assign-action from 1.2.5 to 1.2.6 by @dependabot in https://github.com/goharbor/harbor/pull/19824
* Update replication rule filter label xpath by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19895
* fix: cve export label filter xpath by @zyyw in https://github.com/goharbor/harbor/pull/19931
* add UI test for project quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/19935
* Bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/goharbor/harbor/pull/19936
* Bump kentaro-m/auto-assign-action from 1.2.6 to 2.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19929
* update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in https://github.com/goharbor/harbor/pull/19959
* fix: scanner tab change by @zyyw in https://github.com/goharbor/harbor/pull/20128
* Bump softprops/action-gh-release from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/20115
* delete membership=0 in getProjectsByName by @prima101112 in https://github.com/goharbor/harbor/pull/20153
* feat: add api test case for quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/20209
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20223
* feat: add test case for customizing OIDC provider name by @zyyw in https://github.com/goharbor/harbor/pull/20287
* feat: add tc for limited guest of a project to get repository by @zyyw in https://github.com/goharbor/harbor/pull/20311
* fix: fresh scanner list when updating scanner by @zyyw in https://github.com/goharbor/harbor/pull/20366
* fix: update nightly test case for verifying audit log of image digest by @zyyw in https://github.com/goharbor/harbor/pull/20354
* fix: update to

v2.11.0-rc1 (2024-05-17)



## Known issue
- [known issue #20056](https://github.com/goharbor/harbor/issues/20056) requires a user to be a member of a project in the source (GitLab) registry when doing pull-based replication from GitLab registry to Harbor registry. Even if it is a public project in GitLab registry, a user has to be a member of that project and then performs replication. Affected versions are v2.10.x, v2.9.x.

## What's Changed
### Exciting New Features 🎉
#### SBOM Generation and Management:
 Harbor now provides robust support for generating Software Bill of Materials (SBOM) either manually or automatically. Users can conveniently view, download, and replicate SBOMs across different instances of Harbor.

#### Supporting OCI Distribution Spec v1.1.0 🎉
Harbor now fully supports [OCI Distribution Spec v1.1.0](https://github.com/opencontainers/distribution-spec/tree/v1.1.0)

#### Integration with VolcEngine Registry: 
  Users can now seamlessly replicate images to and from the VolcEngine registry, enhancing interoperability and flexibility within the Harbor ecosystem.

#### Korean UI Translation: 
  The user interface of Harbor has been enriched with the addition of Korean language support, ensuring a more inclusive and accessible experience for Korean-speaking users.

### Enhancement 🚀
* skip transaction for POST /service/token by @liubin in https://github.com/goharbor/harbor/pull/19339
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/19915

### Component updates ⬆️
* Bump github.com/go-openapi/errors from 0.19.6 to 0.20.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19697
* bump golang 1.21.5 & fix golangci-lint error by @MinerYang in https://github.com/goharbor/harbor/pull/19722
* Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19729
* Bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19701
* Bump github.com/prometheus/client_golang from 1.14.0 to 1.17.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19699
* Bump github.com/bmatcuk/doublestar from 1.1.1 to 1.3.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19698
* Fix project metadata validate bug by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19746
* Bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.45.0 to 0.46.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19727
* add description in scanner page by @ShengqiWang in https://github.com/goharbor/harbor/pull/19733
* Fix OpenAPI Specification structural error by @blueswen in https://github.com/goharbor/harbor/pull/19782
* update project-SelectScanner modal Default field css by @ShengqiWang in https://github.com/goharbor/harbor/pull/19753
* Bump up PostgreSQL from 14 to 15 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19789
* fix invalid links in harbor.yml.tmpl by @microyahoo in https://github.com/goharbor/harbor/pull/19786
* Bump golang.org/x/time from 0.4.0 to 0.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19767
* Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19766
* Bump github.com/cloudevents/sdk-go/v2 from 2.13.0 to 2.14.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19764
* Add quota permissions to robot account by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19799
* Bump gopkg.in/h2non/gock.v1 from 1.0.16 to 1.1.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19765
* Bump github.com/go-openapi/runtime from 0.19.20 to 0.26.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19763
* add repository read permission to limitedGuest by @tpoxa in https://github.com/goharbor/harbor/pull/19757
* registryctl/api/registry/blob: fix dropped test error by @alrs in https://github.com/goharbor/harbor/pull/19721
* Remove robot account update quota permission by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19819
* Cache image list with digest key by @stonezdj in https://github.com/goharbor/harbor/pull/19801
* Add verification that robot account duration is not 0 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19829
* fix artifact page bug by @ShengqiWang in https://github.com/goharbor/harbor/pull/19807
* Log ensureArtifact ConflictErr by @LiuShuaiyi in https://github.com/goharbor/harbor/pull/19294
* Fixing typo for About UI by @hasonhai in https://github.com/goharbor/harbor/pull/19840
* Update isValidDuration function by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19843
* fix label select bugs by @ShengqiWang in https://github.com/goharbor/harbor/pull/19850
* Bump k8s.io/client-go from 0.26.2 to 0.29.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19813
* Bump github.com/vmihailenco/msgpack/v5 from 5.0.0-rc.2 to 5.4.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19810
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19809
* feat: add auto_sbom_generation for SBOM auto generation on pushing a … by @zyyw in https://github.com/goharbor/harbor/pull/19869
* add v6 port for nginx and portal config by @MinerYang in https://github.com/goharbor/harbor/pull/19868
* add ip_family config in harbor.yml by @MinerYang in https://github.com/goharbor/harbor/pull/19934
* Bump github.com/aws/aws-sdk-go from 1.34.28 to 1.50.5 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19920
* Bump github.com/go-openapi/errors from 0.20.4 to 0.21.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19890
* Bump github.com/go-ldap/ldap/v3 from 3.2.4 to 3.4.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19889
* Bump vite and @angular-devkit/build-angular in /src/portal by @dependabot in https://github.com/goharbor/harbor/pull/19945
* remove ipfamily config migrate jinja in 2.9 and 2.10 by @MinerYang in https://github.com/goharbor/harbor/pull/19949
* feat: enable configuration of skip_java_db_update by @zyyw in https://github.com/goharbor/harbor/pull/19996
* [Token/JWT] Update to golang-jwt v5.2.0 by @an-toine in https://github.com/goharbor/harbor/pull/19802
* Remove redundant file package-lock.json under src folder by @AllForNothing in https://github.com/goharbor/harbor/pull/20007
* Limit url to local site by @stonezdj in https://github.com/goharbor/harbor/pull/20013
* Bump go.opentelemetry.io/otel from 1.21.0 to 1.23.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19972
* Bump github.com/go-openapi/strfmt from 0.21.8 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19955
* Bump github.com/google/uuid from 1.3.1 to 1.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/19954
* Limit url to local path by @stonezdj in https://github.com/goharbor/harbor/pull/20025
* Bump helm.sh/helm/v3 from 3.11.3 to 3.14.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20017
* Bump github.com/aws/aws-sdk-go from 1.50.5 to 1.50.24 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20018
* Move strong_ssl_ciphers to top level in harbor.yml by @stonezdj in https://github.com/goharbor/harbor/pull/19914
* Check if the internal_tls_config is not null when get strong_ssl_ciph… by @stonezdj in https://github.com/goharbor/harbor/pull/20032
* add sbom settings for project by @wy65701436 in https://github.com/goharbor/harbor/pull/20069
* update referrers api by @wy65701436 in https://github.com/goharbor/harbor/pull/20068
* fix: typos by @testwill in https://github.com/goharbor/harbor/pull/20106
* Update swagger.yaml bad request permission: helm-chart:read by @jm-nab in https://github.com/goharbor/harbor/pull/20094
* Update support for artifactType for both manifest and index by @MinerYang in https://github.com/goharbor/harbor/pull/20030
* Update deletion for index type of accessory by @MinerYang in https://github.com/goharbor/harbor/pull/20073
* add type for scanner metadata by @wy65701436 in https://github.com/goharbor/harbor/pull/20108
* panic due to mark retention task error by @stonezdj in https://github.com/goharbor/harbor/pull/20161
* chore: fix function names by @majorteach in https://github.com/goharbor/harbor/pull/20159
* ScanAll should only log an error when an error occurs by @twhiteman in https://github.com/goharbor/harbor/pull/20087
* Bump github.com/tencentcloud/tencentcloud-sdk-go from 1.0.62 to 3.0.233+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20035
* Bump golang.org/x/sync from 0.3.0 to 0.6.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20036
* Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20104
* Bump github.com/cloudevents/sdk-go/v2 from 2.14.0 to 2.15.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20099
* Bump golang.org/x/net from 0.17.0 to 0.22.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20113
* Bump github.com/jackc/pgx/v4 from 4.18.1 to 4.18.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20139
* Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20124
* Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible in /src by @dependabot in https://github.com/goharbor/harbor/pull/20147
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20037
* fix image name extraction by @tkatkov in https://github.com/goharbor/harbor/pull/18992
* fix: typo by @testwill in https://github.com/goharbor/harbor/pull/20190
* bump golang 1.21.8 on main by @MinerYang in https://github.com/goharbor/harbor/pull/20197
* fix: close file by @testwill in https://github.com/goharbor/harbor/pull/20189
* Update GenAccessoryArt API to generate valid accessory for SBOM by @stonezdj in https://github.com/goharbor/harbor/pull/20214
* fix: test robot account permission by @zyyw in https://github.com/goharbor/harbor/pull/20240
* update artifact_type column alteration by @MinerYang in https://github.com/goharbor/harbor/pull/20239
* Allow empty path in redirect_url by @stonezdj in https://github.com/goharbor/harbor/pull/20238
* fix: close blob io ReadCloser by @testwill in https://github.com/goharbor/harbor/pull/20225
* add stop sbom scanning API by @wy65701436 in https://github.com/goharbor/harbor/pull/20200
* update referrer manifest descriptor size by @MinerYang in https://github.com/goharbor/harbor/pull/20207
* adopt cosign with oci-spec 1.1 by @MinerYang in https://github.com/goharbor/harbor/pull/20245
* Updated internationalisation : fr-fr by @tostt in https://github.com/goharbor/harbor/pull/20179
* feat: expose `trivy.timeout` to configure the duration to wait for scan completion by @zyyw in https://github.com/goharbor/harbor/pull/20257
* bump golang to 1.22.2 by @MinerYang in https://github.com/goharbor/harbor/pull/20256
* Bump k8s.io/api from 0.29.0 to 0.29.3 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20205
* Bump github.com/coreos/go-oidc/v3 from 3.9.0 to 3.10.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20202
* Bump golang.org/x/oauth2 from 0.15.0 to 0.19.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20247
* Sending signals by closing the channel by @Iceber in https://github.com/goharbor/harbor/pull/17917
* Bump go.uber.org/ratelimit from 0.2.0 to 0.3.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20204
* fix: update the image reference format for audit log when pulling image by @zyyw in https://github.com/goharbor/harbor/pull/20278
* fix issue 20269 by @wy65701436 in https://github.com/goharbor/harbor/pull/20274
* fix: update TRIVYVERSION=v0.50.1 && TRIVYADAPTERVERSION=v0.31.0 by @zyyw in https://github.com/goharbor/harbor/pull/20285
* Rename scan request type by @stonezdj in https://github.com/goharbor/harbor/pull/20288
* skip to log scan sbom accessory for sbom accessory by @stonezdj in https://github.com/goharbor/harbor/pull/20290
* refactor: update controller.go by @eltociear in https://github.com/goharbor/harbor/pull/20297
* SBOM UI feature implementation by @xuelichao in https://github.com/goharbor/harbor/pull/19946
* Allow generate sbom in proxy cache project by @stonezdj in https://github.com/goharbor/harbor/pull/20298
* Add enableCapabilities to extraAttrs for stop by @stonezdj in https://github.com/goharbor/harbor/pull/20299
* Set default capability for old scanners by @stonezdj in https://github.com/goharbor/harbor/pull/20306
* Wrong values shown for the columns of support_sbom and support_vulnerability in scanner list by @xuelichao in https://github.com/goharbor/harbor/pull/20308
* add prepare migration script for 2.11.0 by @MinerYang in https://github.com/goharbor/harbor/pull/20315
* Log and skip adapter ping error when retrieve adapter capability by @stonezdj in https://github.com/goharbor/harbor/pull/20314
* Add 422 in the swagger.yaml by @stonezdj in https://github.com/goharbor/harbor/pull/20344
* fix: update image reference to \@\ in audit log when pushing & deleting images by @zyyw in https://github.com/goharbor/harbor/pull/20348
* Add scanner info and report_id to sbom_overview on listing artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20358
* Fix UI bugs by @xuelichao in https://github.com/goharbor/harbor/pull/20364
* Delete scan_report when accessory is removed by @stonezdj in https://github.com/goharbor/harbor/pull/20365
* Bump golang.org/x/net from 0.22.0 to 0.24.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20318
* Bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20317
* Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20370
* Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20316
* Add scan type in webhook event by @stonezdj in https://github.com/goharbor/harbor/pull/20363
* do not delete accessory relationship while still referenced by @MinerYang in https://github.com/goharbor/harbor/pull/20360
* Rename harbor.sbom to sbom.harbor by @stonezdj in https://github.com/goharbor/harbor/pull/20359
* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.26.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20374
* Bump k8s.io/api from 0.29.3 to 0.30.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20375
* Bump github.com/gorilla/csrf from 1.6.2 to 1.7.2 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20376
* Bump github.com/go-asn1-ber/asn1-ber from 1.5.5 to 1.5.6 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20372
* Bump helm.sh/helm/v3 from 3.14.2 to 3.14.4 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20373
* fix update TRIVYVERSION=v0.50.4 & TRIVYADAPTERVERSION=v0.31.1 by @zyyw in https://github.com/goharbor/harbor/pull/20390
* fix: enale stop_scan for ci by @zyyw in https://github.com/goharbor/harbor/pull/20378
* Update scan job request log for enabled_capabilities by @MinerYang in https://github.com/goharbor/harbor/pull/20414
* fix issue 20407 by @wy65701436 in https://github.com/goharbor/harbor/pull/20416
* Skip scan in-toto sbom artifact by @stonezdj in https://github.com/goharbor/harbor/pull/20415
* fix issue 19928 by @wy65701436 in https://github.com/goharbor/harbor/pull/20409
* chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20397
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux from 0.46.1 to 0.51.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20394
* chore(deps): bump github.com/go-openapi/strfmt from 0.22.0 to 0.23.0 in /src by @dependabot in https://github.com/goharbor/harbor/pull/20396
* add membership=true back for gitlab replication adapter by @zyyw in https://github.com/goharbor/harbor/pull/20400
* Display status in sbom_overview for image index by @stonezdj in https://github.com/goharbor/harbor/pull/20425
* Add additional link for sboms by @stonezdj in https://github.com/goharbor/harbor/pull/20423
* bump golang 1.22.3 by @MinerYang in https://github.com/goharbor/harbor/pull/20433
* Initialize execution Manager in Report Assembler by @stonezdj in https://github.com/goharbor/harbor/pull/20437
### Docs update 🗄️
* Fix docker version to 20.10.10 by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19751
* revise the tags of Interrogation Services by @xuelichao in https://github.com/goharbor/harbor/pull/20049
* Add two columns to display capability type for scanner by @xuelichao in https://github.com/goharbor/harbor/pull/20111
### Other Changes
* Bump actions/stale from 8.0.0 to 9.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19689
* Update Robot Account Test Case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19710
* Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/goharbor/harbor/pull/19714
* Bump google-github-actions/setup-gcloud from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/19696
* Add notation replication test case by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19738
* Add multi-tier accessory replication test cases by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19730
* Add quota permissions testcase by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19822
* deprecate gosec in makefile by @wy65701436 in https://github.com/goharbor/harbor/pull/19828
* Bump kentaro-m/auto-assign-action from 1.2.5 to 1.2.6 by @dependabot in https://github.com/goharbor/harbor/pull/19824
* Update replication rule filter label xpath by @YangJiao0817 in https://github.com/goharbor/harbor/pull/19895
* fix: cve export label filter xpath by @zyyw in https://github.com/goharbor/harbor/pull/19931
* add UI test for project quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/19935
* Bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/goharbor/harbor/pull/19936
* Bump kentaro-m/auto-assign-action from 1.2.6 to 2.0.0 by @dependabot in https://github.com/goharbor/harbor/pull/19929
* update retry of get_scan_data_export_execution from 5 to 15 by @zyyw in https://github.com/goharbor/harbor/pull/19959
* fix: scanner tab change by @zyyw in https://github.com/goharbor/harbor/pull/20128
* Bump softprops/action-gh-release from 1 to 2 by @dependabot in https://github.com/goharbor/harbor/pull/20115
* delete membership=0 in getProjectsByName by @prima101112 in https://github.com/goharbor/harbor/pull/20153
* feat: add api test case for quota sorting by @zyyw in https://github.com/goharbor/harbor/pull/20209
* fix: update e2e test engine images by @zyyw in https://github.com/goharbor/harbor/pull/20223
* feat: add test case for customizing OIDC provider name by @zyyw in https://github.com/goharbor/harbor/pull/20287
* feat: add tc for limited guest of a project to get repository by @zyyw in https://github.com/goharbor/harbor/pull/20311
* fix: fresh scanner list when updating scanner by @zyyw in https://github.com/goharbor/harbor/pull/20366
* fix: update nightly test case for verifying audit log of image digest by @zyyw in https://github.com/goharbor/harbor/pull/20354
* fix: update to

🚀 goharbor/harbor - Release Notes

v2.13.0-rc1 (2025-04-03)

v2.12.2 (2025-01-16)

v2.12.2-rc2 (2025-01-16)

v2.12.2-rc1 (2025-01-15)

v2.12.1 (2024-12-24)

v2.12.1-rc3 (2024-12-23)

v2.12.1-rc2 (2024-12-16)

v2.12.1-rc1 (2024-12-11)

v2.11.2 (2024-11-19)

v2.11.2-rc1 (2024-11-15)

v2.12.0 (2024-11-08)

v2.12.0-rc2 (2024-11-07)

v2.12.0-rc1 (2024-10-27)

v1.10.19 (2024-09-20)

v1.10.19-rc1 (2024-09-11)

v2.11.1 (2024-08-21)

v2.11.1-rc2 (2024-08-19)

v2.11.1-rc1 (2024-08-13)

v2.10.3 (2024-07-04)

v2.10.3-rc1 (2024-07-03)

v2.9.5 (2024-07-01)

v2.9.5-rc1 (2024-06-28)

v2.11.0 (2024-06-06)

v2.11.0-rc3 (2024-06-06)

v2.11.0-rc2 (2024-06-04)

v2.11.0-rc1 (2024-05-17)

v2.9.4 (2024-04-18)

v2.9.4-rc1 (2024-04-16)

v2.8.6 (2024-04-22)

v2.8.6-rc1 (2024-04-18)