●Change8

v2.13.0-rc2

📦 harborView on GitHub →
✨ 17 features🐛 13 fixes🔧 3 symbols

Summary

This release introduces significant new features centered around audit logging enhancements, OIDC improvements (including PKCE support), and support for AI Model artifact types. It also includes extensive dependency updates and various bug fixes across replication and authentication.

✨ New Features

  • Add swagger api and audit_log_ext table model.
  • Add configure item for audit_log_disable.
  • Add config max_job_duration_hours for jobservice.
  • Add middleware for audit log.
  • Add dao and manager for audit log ext.
  • Implement audit log ext API.
  • Add user login event to audit log.
  • Add user event and config event.
  • Update purge audit to purge both audit_log_ext and audit_log.
  • Add OIDC login event.
  • Add redis tls support for core and jobservice.
  • Remove version info for anonymous users.
  • Prepare redis tls config.
  • Update tlsOptions for external redis.
  • Implement the CNAI model processor.
  • Implement OIDC logout functionality.
  • Artifacts now support the AI Model type.

🐛 Bug Fixes

  • Fix auth config oidc scope regex.
  • Fix build package issue.
  • Fix postgres script permissions.
  • Fix event-based replication deletion when policy has a label.
  • Fix robot deletion event.
  • Fix robot account creation issue.
  • Fix export cve permission issue.
  • Fixed the type in DTR adapter info.
  • Fix: unify the auth data handle to the decode method.
  • Skip admin and change oidc user not found message to be more readable.
  • Update prepare to avoid error when max_job_duration_hours is not configured.
  • Remove id field from payload when updating purge audit or gc schedule.
  • Fix Overlay Issue in Replication Page UI.

🔧 Affected Symbols

audit_log_extaudit_logreplication webhook payload