Wang Yan
66ccf302f3
remove the robot update permission ( #21028 )
...
from the perspective of preventing privilege escalation, remove the robot update permission from the possilbe permission set
Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-12 18:08:50 +08:00
dependabot[bot]
c4bad32bb3
chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.0.138 to 1.0.159 in /src ( #20984 )
...
chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src
Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk ) from 1.0.138 to 1.0.159.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases )
- [Commits](https://github.com/volcengine/volcengine-go-sdk/compare/v1.0.138...v1.0.159 )
---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
2024-10-12 09:08:40 +00:00
Jim Chen
67d0fecc7b
feat: support Alibaba ACR proxy cache type ( #19692 )
...
* feat: support Alibaba ACR proxy cache type
Signed-off-by: njucjc <njucjc@gmail.com>
* chore: replace 'Alibaba ACR' to 'Alibaba Cloud ACR'
Signed-off-by: njucjc <njucjc@gmail.com>
---------
Signed-off-by: njucjc <njucjc@gmail.com>
Co-authored-by: chenjici.cjc <chenjinci.cjc@alibaba-inc.com>
2024-10-12 11:07:13 +08:00
Jim Chen
69bea4daa3
Feat: add acr ee support ( #19658 )
...
* feat: add acr ee support
Signed-off-by: njucjc <njucjc@gmail.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
2024-10-11 18:34:38 +08:00
dependabot[bot]
0d9dc7096f
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0 in /src ( #20983 )
...
* chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) from 0.54.0 to 0.55.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.54.0...zpages/v0.55.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* go mod tidy
Signed-off-by: yminer <miner.yang@broadcom.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: yminer <miner.yang@broadcom.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: yminer <miner.yang@broadcom.com>
2024-10-11 13:53:53 +08:00
dependabot[bot]
00b14701e6
chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src ( #21008 )
...
* chore(deps): bump golang.org/x/time from 0.5.0 to 0.7.0 in /src
Bumps [golang.org/x/time](https://github.com/golang/time ) from 0.5.0 to 0.7.0.
- [Commits](https://github.com/golang/time/compare/v0.5.0...v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/time
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* go mod tidy
Signed-off-by: yminer <miner.yang@broadcom.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: yminer <miner.yang@broadcom.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: yminer <miner.yang@broadcom.com>
Co-authored-by: miner <yminer@vmware.com>
2024-10-10 10:06:51 +00:00
miner
ab59a46a87
add prepare migration script for 2.12.0 ( #21022 )
...
Signed-off-by: yminer <miner.yang@broadcom.com>
2024-10-10 16:56:33 +08:00
Wang Yan
de281220b5
update golang version ( #21014 )
...
* update golang version
to golang v1.23.2
Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-10 13:36:18 +08:00
Daniel Jiang
f6eec371d7
Bump up trivy adapter ( #21015 )
...
update the version and point to the URL of new repository under goharbor
Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2024-10-10 11:10:06 +08:00
Chlins Zhang
ad8c5df52e
fix: p2p instance test connection ( #20968 )
...
Signed-off-by: chlins <chlins.zhang@gmail.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2024-09-27 06:33:23 +00:00
kunal Dugar
ab400c9dd2
UI Changes for Configuring Proxy-Cache Speed Limit ( #20946 )
...
* Implemented proxy-cache bandwidth limit UI change
Signed-off-by: kunal-511 <yoyokvunal@gmail.com>
* Removed ducplicate space between words
Signed-off-by: kunal-511 <yoyokvunal@gmail.com>
* Fix UT issue
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
---------
Signed-off-by: kunal-511 <yoyokvunal@gmail.com>
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Co-authored-by: stonezdj <stone.zhang@broadcom.com>
2024-09-27 12:45:52 +08:00
Wang Yan
e4fe61ddb7
enable robot full access ( #20754 )
...
* have option to enable robot full access
When the system admin enable this option, the robot can be assigned with robot/user/group/quota permissions.
Signed-off-by: wang yan <wangyan@vmware.com>
* robot account permission enhancement
Update codes according to the proposal of https://github.com/goharbor/community/pull/249
Signed-off-by: wang yan <wangyan@vmware.com>
---------
Signed-off-by: wang yan <wangyan@vmware.com>
2024-09-26 19:09:50 +08:00
Vadim Bauer
d42c34786f
Make it possible to build the spectral image also on ARM ( #20506 )
...
* This makes changes makes it possible to build the spectral image also on ARM architecture.
* no message
Signed-off-by: Vadim Bauer <vb@container-registry.com>
* fix issue
Signed-off-by: Vadim Bauer <vb@container-registry.com>
---------
Signed-off-by: Vadim Bauer <vb@container-registry.com>
2024-09-26 07:11:11 +00:00
miner
cb7fef1840
Bump up portal packages ( #20959 )
...
Bump up portal package
Signed-off-by: yminer <yminer@vmware.com>
bump api-swagger-ui pacaakge
2024-09-25 14:06:20 +08:00
Renming
22eebd2693
Update comments in template file of installation configurations ( #20929 )
...
Signed-off-by: Simon Zhao <simon@SimondeMacBook-Pro.local>
Co-authored-by: Simon Zhao <simon@SimondeMacBook-Pro.local>
2024-09-25 04:07:00 +00:00
miner
febde11df3
bump up dependencies ( #20955 )
...
Signed-off-by: yminer <yminer@vmware.com>
2024-09-24 15:46:39 +08:00
Chlins Zhang
c97253f660
Refactor: p2p preheat dragonfly driver ( #20922 )
2024-09-21 11:05:01 +08:00
tostt
8d52a63311
Update fr-fr-lang.json ( #20942 )
...
Signed-off-by: tostt <tostt@users.noreply.github.com>
2024-09-20 09:27:48 +08:00
Wang Yan
438d4c03bb
update robot creator database scheme ( #20918 )
...
Signed-off-by: wang yan <wangyan@vmware.com>
2024-09-14 12:49:32 +08:00
dependabot[bot]
c5d2672360
chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.28.0 in /src ( #20784 )
...
chore(deps): bump github.com/go-openapi/runtime in /src
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime ) from 0.26.2 to 0.28.0.
- [Release notes](https://github.com/go-openapi/runtime/releases )
- [Commits](https://github.com/go-openapi/runtime/compare/v0.26.2...v0.28.0 )
---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: miner <yminer@vmware.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
Co-authored-by: miner <yminer@vmware.com>
2024-09-05 06:20:32 +00:00
dependabot[bot]
7662437303
chore(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /src ( #20785 )
...
chore(deps): bump github.com/coreos/go-oidc/v3 in /src
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc ) from 3.10.0 to 3.11.0.
- [Release notes](https://github.com/coreos/go-oidc/releases )
- [Commits](https://github.com/coreos/go-oidc/compare/v3.10.0...v3.11.0 )
---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
Co-authored-by: miner <yminer@vmware.com>
2024-09-05 05:19:58 +00:00
dependabot[bot]
2a9411357a
chore(deps): bump github.com/aws/aws-sdk-go from 1.53.14 to 1.55.5 in /src ( #20879 )
...
chore(deps): bump github.com/aws/aws-sdk-go in /src
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.53.14 to 1.55.5.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.53.14...v1.55.5 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
2024-09-05 04:01:40 +00:00
dependabot[bot]
7a36f4fe0f
chore(deps-dev): bump webpack from 5.76.0 to 5.94.0 in /src/portal/app-swagger-ui ( #20888 )
...
chore(deps-dev): bump webpack in /src/portal/app-swagger-ui
Bumps [webpack](https://github.com/webpack/webpack ) from 5.76.0 to 5.94.0.
- [Release notes](https://github.com/webpack/webpack/releases )
- [Commits](https://github.com/webpack/webpack/compare/v5.76.0...v5.94.0 )
---
updated-dependencies:
- dependency-name: webpack
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-05 11:25:17 +08:00
dependabot[bot]
108fa9e101
chore(deps): bump github.com/dghubble/sling from 1.1.0 to 1.4.2 in /src ( #20783 )
...
Bumps [github.com/dghubble/sling](https://github.com/dghubble/sling ) from 1.1.0 to 1.4.2.
- [Release notes](https://github.com/dghubble/sling/releases )
- [Changelog](https://github.com/dghubble/sling/blob/main/CHANGES.md )
- [Commits](https://github.com/dghubble/sling/compare/v1.1.0...v1.4.2 )
---
updated-dependencies:
- dependency-name: github.com/dghubble/sling
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-09-04 11:58:45 +00:00
dependabot[bot]
9ad8094440
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.54.0 in /src ( #20878 )
...
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) from 0.49.0 to 0.54.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.49.0...zpages/v0.54.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
Co-authored-by: miner <yminer@vmware.com>
2024-09-04 09:26:24 +00:00
stonezdj(Daojun Zhang)
a946447cad
Escape the - with \- when it is a char of itself ( #20892 )
...
fixes #20891
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-09-03 10:30:18 +08:00
Chlins Zhang
9d11de9706
refactor: remove useless error check for scan data export job ( #20883 )
...
Signed-off-by: chlins <chlins.zhang@gmail.com>
Co-authored-by: miner <yminer@vmware.com>
2024-08-30 03:59:27 +00:00
Chongzhi Deng
234cd4ffc2
Fix typos in src/common ( #20861 )
...
Signed-off-by: BruceAko <chongzhi@hust.edu.cn>
2024-08-28 03:09:31 +00:00
kunal Dugar
146443e4d7
Fixed the ui bug of banner coming over the search result container ( #20871 )
...
Signed-off-by: kunal-511 <yoyokvunal@gmail.com>
2024-08-28 02:30:20 +00:00
Maksym Trofimenko
44284ac6c7
Feature export Harbor statistics as Prometheus metric ( #18679 )
...
add statistics metrics collector
Signed-off-by: Maksym Trofimenko <maksym.trofimenko@gmail.com>
Co-authored-by: Maksym Trofimenko <maksym.trofimenko@gmail.com>
2024-08-27 17:35:31 +03:00
Shengwen YU
1fd606a02b
fix: migrate cicd to registry goharbor ( #20872 )
...
* fix: migrate cicd to registry goharbor
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
* fix: use ${LOCAL_REGISTRY}
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
---------
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-08-26 14:43:52 +08:00
Shengwen YU
15b3d53a29
fix: update helm.sh/helm/v3 and github.com/google/go-containerregistry ( #20858 )
...
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-08-26 13:53:02 +08:00
Wang Yan
51eeb098ef
add creator for robot ( #20846 )
...
* add creator for robot
add the creator for robot creation
Signed-off-by: wang yan <wangyan@vmware.com>
* resolve comments
Signed-off-by: wang yan <wangyan@vmware.com>
* fix ut
Signed-off-by: wang yan <wangyan@vmware.com>
---------
Signed-off-by: wang yan <wangyan@vmware.com>
2024-08-15 14:43:19 +08:00
Wang Yan
8ad8827e28
enable audit log for robot ( #20843 )
...
1, add creation audit log for robot account
2, add deletion audit log for robot account
Signed-off-by: wang yan <wangyan@vmware.com>
2024-08-14 19:57:36 +08:00
Shengwen YU
8107f47e12
fix: update e2e test engine images ( #20845 )
...
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-08-14 17:37:20 +08:00
Johan Kok
907709ff6d
Fix typo in Swagger API docs ( #20841 )
...
Signed-off-by: Johan Kok <post@johankok.nl>
2024-08-13 16:31:10 +08:00
Chlins Zhang
ccceacfa73
fix: fix the GC job index data race ( #20830 )
...
Signed-off-by: chlins <chlins.zhang@gmail.com>
2024-08-12 12:24:16 +00:00
蝦米
cadd3825aa
Fix #20658 docker-compose version is obsolete warning ( #20659 )
...
fix `version` is obsolete warning
Signed-off-by: 蝦米 <me@jhdxr.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
Co-authored-by: MinerYang <yminer@vmware.com>
2024-08-12 06:51:52 +00:00
stonezdj(Daojun Zhang)
4ad86b300a
Check create when fire the artifact event ( #20832 )
...
fixes #20828
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-08-12 11:16:21 +08:00
Mitsuru Kariya
79886dfcce
remove migrate-patch ( #20619 )
...
PR #18668 (commit bf7c82b9a
2024-08-09 19:22:21 +08:00
stonezdj(Daojun Zhang)
eb5193e0ef
Parallel attach ldap group ( #20705 )
...
Parallel attach LDAP group
Add configure LDAP group attach parallel UI
Change the /c/login timeout from 60 (nginx default) to 900 seconds in nginx.conf
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-08-09 15:24:25 +08:00
Shengwen YU
1f75b7aaef
feat: implement bandwidth limit for proxy-cache ( #20812 )
...
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-08-08 19:02:54 +08:00
Ethan Howell
ec5dc094d9
Extend AWS ECR regex for c2s support ( #20648 )
...
* Extend regex for c2s support
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
* Add more test cases
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
* Update region
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
* Fix region parsing
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
* Add length check
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
* Update check
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
---------
Signed-off-by: Ethan Howell <ethan.c.howell@hotmail.com>
2024-08-08 08:34:57 +00:00
Lichao Xue
ec77bd9b12
Fixes-20799 can't remove artifact labels ( #20816 )
...
Signed-off-by: xuelichao <xuel@vmware.com>
2024-08-07 14:51:39 +08:00
Wang Yan
b7f1b59495
add list project arifacts API ( #20803 )
...
* add list project arifacts API
This API supports listing all artifacts belonging to a specified project. It also allows fetching the latest artifact
in each repositry, with the option to filter by either media_type or artifact_type.
Signed-off-by: wang yan <wangyan@vmware.com>
* resolve the comments
Signed-off-by: wang yan <wangyan@vmware.com>
---------
Signed-off-by: wang yan <wangyan@vmware.com>
2024-08-06 18:29:13 +08:00
Chlins Zhang
5deedf4c7c
refactor: unify the mock file generation ( #20765 )
...
1. Mock remote interface for distribution manifest by mockery package
feature.
2. Refactor hand-generated mock files to automated management
generation.
3. Clean useless mocks.
Signed-off-by: chlins <chlins.zhang@gmail.com>
2024-08-05 11:11:05 +00:00
Shengwen YU
295e075568
add Test Case for SBOM feature ( #20797 )
...
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-08-01 16:05:39 +08:00
dependabot[bot]
e0b94aa7d7
chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /src ( #20721 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.64.0 to 1.64.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shengwen YU <yshengwen@vmware.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-07-24 21:01:47 +08:00
dependabot[bot]
d4c99d2dd1
chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.19.0 in /src ( #20716 )
...
Bumps [github.com/spf13/viper](https://github.com/spf13/viper ) from 1.8.1 to 1.19.0.
- [Release notes](https://github.com/spf13/viper/releases )
- [Commits](https://github.com/spf13/viper/compare/v1.8.1...v1.19.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/viper
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shengwen YU <yshengwen@vmware.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-07-24 17:32:04 +08:00
MinerYang
2dd029e702
make distribution_src configurable ( #20769 )
...
Signed-off-by: yminer <yminer@vmware.com>
2024-07-24 08:41:58 +00:00
