Skip to content

Set MAX_JOB_DURATION_SECONDS from jobservice config.yml #22116

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jul 18, 2025
Merged

Set MAX_JOB_DURATION_SECONDS from jobservice config.yml #22116

merged 1 commit into from
Jul 18, 2025

Conversation

stonezdj
Copy link
Contributor

Thank you for contributing to Harbor!

Comprehensive Summary of your change

Issue being fixed

Fixes #(issue)

Please indicate you've done the following:

  • Well Written Title and Summary of the PR
  • Label the PR as needed. "release-note/ignore-for-release, release-note/new-feature, release-note/update, release-note/enhancement, release-note/community, release-note/breaking-change, release-note/docs, release-note/infra, release-note/deprecation"
  • Accepted the DCO. Commits without the DCO will delay acceptance.
  • Made sure tests are passing and test coverage is added if needed.
  • Considered the docs impact and opened a new docs issue or PR with docs changes if needed in website repository.

@stonezdj stonezdj requested a review from a team as a code owner June 24, 2025 05:09
@stonezdj stonezdj force-pushed the 25jun20_use_single_config_jobservice_expire branch from 4617d6e to 05a4ea1 Compare June 24, 2025 05:12
@codecov Codecov
Copy link

codecov bot commented Jun 24, 2025 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 65.89%. Comparing base (c8c11b4) to head (0f2d38b).
Report is 513 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##             main   #22116       +/-   ##
===========================================
+ Coverage   45.36%   65.89%   +20.52%     
===========================================
  Files         244     1072      +828     
  Lines       13333   115789   +102456     
  Branches     2719     2925      +206     
===========================================
+ Hits         6049    76296    +70247     
- Misses       6983    35265    +28282     
- Partials      301     4228     +3927
Flag Coverage Δ
unittests 65.89% <100.00%> (+20.52%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
src/jobservice/config/config.go 50.00% <100.00%> (ø)

... and 985 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@stonezdj stonezdj force-pushed the 25jun20_use_single_config_jobservice_expire branch 2 times, most recently from ea3f98d to 8e511d0 Compare June 24, 2025 05:20
Copilot
Copilot AI reviewed Jun 24, 2025
View reviewed changes
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the jobservice configuration to automatically set MAX_JOB_DURATION_SECONDS based on the jobservice config.yml instead of relying on an externally provided environment variable.

  • Introduces a new constant and helper function (initJobDurationEnv) to set the environment variable if not preset.
  • Removes the corresponding MAX_JOB_DURATION_SECONDS entry from the env.jinja template so that the value is now provided by the application.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
src/jobservice/config/config.go Adds configuration constant, integrates error handling, and sets MAX_JOB_DURATION_SECONDS programmatically.
make/photon/prepare/templates/jobservice/env.jinja Removes manual assignment of MAX_JOB_DURATION_SECONDS to shift control to the application code.

@stonezdj stonezdj mentioned this pull request Jun 27, 2025
Closed
chlins
chlins reviewed Jun 27, 2025
View reviewed changes
chlins
chlins reviewed Jun 27, 2025
View reviewed changes
@stonezdj stonezdj force-pushed the 25jun20_use_single_config_jobservice_expire branch 2 times, most recently from a4bffe2 to 0a755dc Compare July 2, 2025 05:48
reasonerjt
reasonerjt approved these changes Jul 8, 2025
View reviewed changes
Copy link
Contributor

@reasonerjt reasonerjt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@stonezdj stonezdj force-pushed the 25jun20_use_single_config_jobservice_expire branch from 0a755dc to 0f2d38b Compare July 18, 2025 09:23
@stonezdj stonezdj enabled auto-merge (squash) July 18, 2025 09:24
wy65701436
wy65701436 approved these changes Jul 18, 2025
View reviewed changes
Copy link
Contributor

@wy65701436 wy65701436 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@stonezdj stonezdj merged commit ebdfb54 into goharbor:main Jul 18, 2025
12 checks passed
Vad1mo added a commit to container-registry/harbor-next that referenced this pull request Sep 3, 2025
@Vad1mo @yuzp1996
@strigazi @reasonerjt @rgcr @mooneeb @stonezdj @MinerYang @dependabot @wy65701436 @chlins
Update README.md (#48) (#64)
330625f 
* Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject (goharbor#22165)

Signed-off-by: yuzhipeng <[email protected]>

* Update FixVersion and ScoreV3 (goharbor#22007)

Set Fix and CVE3Score in VulnerabilityRecord from VulnerabilityItem.

Follow-up of goharbor#21915
Fixes goharbor#21463

Signed-off-by: Spyros Trigazis <[email protected]>

* Add "status" of CVEs to artfact scan report (goharbor#22177)

This commit adds the field "status" to the struct of a vulnerability and adds
column "status" to vulnerability record table.  It makes sure the statuses
of CVEs returned by trivy scanner are persisted and can be returned via
the vulnerabilities addition API of an artifact.

Signed-off-by: Daniel Jiang <[email protected]>

* Improve portal README.md formatting and clarity (goharbor#22173)

improving the portal readme file

Signed-off-by: rgcr <[email protected]>

* chore: Updated RELEASE.md by updating Minor Release Support Map (goharbor#22145)

Updated the Minor Release Support Matrix to include v2.13

Signed-off-by: Mooneeb Hussain <[email protected]>

* Add status field to the API on secyurityHub (goharbor#22182)

This commit makes change to the API GET /api/v2.0/vul to make it include
"status" of CVEs in the response.

It also makes update in the UI to add the "Status" column to the data
grids in security hub and artifact details page.

Signed-off-by: Daniel Jiang <[email protected]>

* Set MAX_JOB_DURATION_SECONDS from jobservice config.yml (goharbor#22116)

Signed-off-by: stonezdj <[email protected]>

* clean up project metadata for tag retention policy after deletion (goharbor#22174)

Signed-off-by: my036811 <[email protected]>

* chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src (goharbor#22113)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <[email protected]>

* chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src (goharbor#22188)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Remove testcase Open Image Scanners doc page (goharbor#22180)

Signed-off-by: stonezdj <[email protected]>

* Don't always skip vuln check when artifact is not scannable (goharbor#22187)

fixes goharbor#22143

This commit makes update to the vulnerable policy middleware.  So that
it will skip the sheck only when the artifact is not scannable AND it
does not have a scan report.

Signed-off-by: Daniel Jiang <[email protected]>

* Display download url for BUILD_PACKAGE action (goharbor#22197)

Signed-off-by: stonezdj <[email protected]>

* add the replicaiton adapter whitelist (goharbor#22198)

fixes goharbor#21925

According to https://github.com/goharbor/harbor/wiki/Harbor-Replicaiton-Adapter-Owner, some replication adapters are no longer actively maintained by the Harbor community. To address this, a whitelist environment variable is introduced to define the list of actively supported adapters, which will be used by the Harbor portal and API to display and allow usage.

If you still wish to view and use the unsupported or inactive adapters, you must manually update the whitelist and include the desired adapter names. For the list of adapter names, refer to https://github.com/goharbor/harbor/blob/main/src/pkg/reg/model/registry.go#L22

Signed-off-by: wang yan <[email protected]>

* fix: correct the permission of project maintainer role for webhook policy (goharbor#22135)

Signed-off-by: chlins <[email protected]>

* update the orm filter func (goharbor#22208)

to extend the enhancement from goharbor#21924 to fuzzy and range match. After the enhance, the orm.ExerSep is not supported in any sort of query keywords.

Signed-off-by: wy65701436 <[email protected]>

* bump golang version (goharbor#22205)

to the latest golang version v1.24.5 from v1.24.3

Signed-off-by: wy65701436 <[email protected]>

* Add HTTP 409 error when creating robot account (goharbor#22201)

fixes goharbor#22107

Signed-off-by: stonezdj <[email protected]>

* feat: support raw format for CNAI model (goharbor#22040)

Signed-off-by: chlins <[email protected]>

* The tag retention job failed with 403 error message (goharbor#22159)

fixes goharbor#22141

Signed-off-by: stonezdj <[email protected]>

* remove extra build_base=false && pull_base_from_dockerhub=false check logic (goharbor#22233)

remove extra build_base=false && pull_base_from_dockerhub=false logic
we do not block the case using local chached image(docker build --pull=false) while build_base=false
However we need gurantee always pull latest image while build package
And when there's some rate limit issue in the CICD situation we could set pull_base_from_dockerhub=false

Signed-off-by: my036811 <[email protected]>

* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src (goharbor#22225)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.19 to 1.1.25.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.19...v1.1.25)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <[email protected]>

* Delete local cache if the artifact doesn't exist in upstream registry (goharbor#22175)

fixes goharbor#20596

Signed-off-by: stonezdj <[email protected]>

* update the support list of proxy cache (goharbor#22237)

According to PR goharbor#22198, some inactive adapters have been removed from the default adapter list.
This pull request updates PERMITTED_REGISTRY_TYPES_FOR_PROXY_CACHE accordingly, since the list of proxy cache adapters should be a subset of the replication adapters.

Signed-off-by: wy65701436 <[email protected]>

* bump go version (goharbor#22238)

* feat: Single Active Replication (goharbor#21347)

feat(replication): add Single Active Replication per policy

* Added single_active_replication field to schema & DB table
* Updated API, controller & handler to enforce single execution per policy
* Added checkbox in UI to enable/disable single_active_replication for a
  policy
* Implemented necessary backend & frontend tests
* Prevents parallel runs per policy if single_active_replication is enabled

Signed-off-by: bupd <[email protected]>

* bump base verson for v2.15.0 (goharbor#22241)

Signed-off-by: wy65701436 <[email protected]>

* build base images (goharbor#22249)

1, downgrade the base version to 2.14, and update it whenever we have the release-2.14.0 branch.
2, refresh the base images bses on the latest code.

Signed-off-by: wy65701436 <[email protected]>

* Upload build logs to github artifact (goharbor#22223)

Upload log files to github with 5 day retention

Signed-off-by: stonezdj <[email protected]>

* add prepare migration script for 2.14.0 (goharbor#22247)

Signed-off-by: my036811 <[email protected]>

* chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src (goharbor#22258)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.18.4 to 3.18.5.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.18.4...v3.18.5)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump actions/checkout from 3 to 5 (goharbor#22250)

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src (goharbor#22244)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.25 to 1.1.26.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.25...v1.1.26)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Return the Resport when the scanner is unhealthy (goharbor#22255)

This commit fixes goharbor#22254
It updates the "GetReport" function, such that when the scanner is
unhealthy, and we can't know the the artifact is supported, we will
still try to return the report stored in DB.

Signed-off-by: Daniel Jiang <[email protected]>

* Refine the sql to query non empty repositories (goharbor#22269)

use exists instead of in condition

Signed-off-by: stonezdj <[email protected]>

* chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src (goharbor#22282)

Bumps [github.com/beego/beego/v2](https://github.com/beego/beego) from 2.3.6 to 2.3.8.
- [Release notes](https://github.com/beego/beego/releases)
- [Changelog](https://github.com/beego/beego/blob/master/CHANGELOG.md)
- [Commits](beego/beego@v2.3.6...v2.3.8)

---
updated-dependencies:
- dependency-name: github.com/beego/beego/v2
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src (goharbor#22283)

chore(deps): bump github.com/prometheus/client_model in /src

Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.1...v0.6.2)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src (goharbor#22281)

chore(deps): bump github.com/cloudevents/sdk-go/v2 in /src

Bumps [github.com/cloudevents/sdk-go/v2](https://github.com/cloudevents/sdk-go) from 2.15.2 to 2.16.1.
- [Release notes](https://github.com/cloudevents/sdk-go/releases)
- [Commits](cloudevents/sdk-go@v2.15.2...v2.16.1)

---
updated-dependencies:
- dependency-name: github.com/cloudevents/sdk-go/v2
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src (goharbor#22243)

chore(deps): bump github.com/go-openapi/swag in /src

Bumps [github.com/go-openapi/swag](https://github.com/go-openapi/swag) from 0.23.0 to 0.23.1.
- [Commits](go-openapi/swag@v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src (goharbor#22284)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.26 to 1.1.29.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.26...v1.1.29)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update README.md (#48)

Describe whats different in next

Signed-off-by: Vadim Bauer <[email protected]>

* Update README.md (#54)

Signed-off-by: Vadim Bauer <[email protected]>

* Correct conformance_test GitHub Actions workflow at line 31 (merges into #64)

---------

Signed-off-by: yuzhipeng <[email protected]>
Signed-off-by: Spyros Trigazis <[email protected]>
Signed-off-by: Daniel Jiang <[email protected]>
Signed-off-by: rgcr <[email protected]>
Signed-off-by: Mooneeb Hussain <[email protected]>
Signed-off-by: stonezdj <[email protected]>
Signed-off-by: my036811 <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: wang yan <[email protected]>
Signed-off-by: chlins <[email protected]>
Signed-off-by: wy65701436 <[email protected]>
Signed-off-by: stonezdj <[email protected]>
Signed-off-by: bupd <[email protected]>
Signed-off-by: Vadim Bauer <[email protected]>
Signed-off-by: Prasanth Baskar <[email protected]>
Co-authored-by: yuzhipeng <[email protected]>
Co-authored-by: Spyros Trigazis <[email protected]>
Co-authored-by: Daniel Jiang <[email protected]>
Co-authored-by: Roger <[email protected]>
Co-authored-by: Moon <[email protected]>
Co-authored-by: stonezdj(Daojun Zhang) <[email protected]>
Co-authored-by: miner <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <[email protected]>
Co-authored-by: Wang Yan <[email protected]>
Co-authored-by: Chlins Zhang <[email protected]>
Co-authored-by: Vadim Bauer <[email protected]>
Co-authored-by: cubic Bot <[email protected]>
Vad1mo added a commit to container-registry/harbor-next that referenced this pull request Sep 3, 2025
@Vad1mo @yuzp1996
@strigazi @reasonerjt @rgcr @mooneeb @stonezdj @MinerYang @dependabot @wy65701436 @chlins
Feat: Add Dagger Pipelines to Harbor (#65)
41ac785 
* Add 400 code response in swagger.yaml for updateRegistry updateReplicationPolicy and headProject (goharbor#22165)

Signed-off-by: yuzhipeng <[email protected]>

* Update FixVersion and ScoreV3 (goharbor#22007)

Set Fix and CVE3Score in VulnerabilityRecord from VulnerabilityItem.

Follow-up of goharbor#21915
Fixes goharbor#21463

Signed-off-by: Spyros Trigazis <[email protected]>

* Add "status" of CVEs to artfact scan report (goharbor#22177)

This commit adds the field "status" to the struct of a vulnerability and adds
column "status" to vulnerability record table.  It makes sure the statuses
of CVEs returned by trivy scanner are persisted and can be returned via
the vulnerabilities addition API of an artifact.

Signed-off-by: Daniel Jiang <[email protected]>

* Improve portal README.md formatting and clarity (goharbor#22173)

improving the portal readme file

Signed-off-by: rgcr <[email protected]>

* chore: Updated RELEASE.md by updating Minor Release Support Map (goharbor#22145)

Updated the Minor Release Support Matrix to include v2.13

Signed-off-by: Mooneeb Hussain <[email protected]>

* Add status field to the API on secyurityHub (goharbor#22182)

This commit makes change to the API GET /api/v2.0/vul to make it include
"status" of CVEs in the response.

It also makes update in the UI to add the "Status" column to the data
grids in security hub and artifact details page.

Signed-off-by: Daniel Jiang <[email protected]>

* Set MAX_JOB_DURATION_SECONDS from jobservice config.yml (goharbor#22116)

Signed-off-by: stonezdj <[email protected]>

* clean up project metadata for tag retention policy after deletion (goharbor#22174)

Signed-off-by: my036811 <[email protected]>

* chore(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.3 in /src (goharbor#22113)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <[email protected]>

* chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /src (goharbor#22188)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Remove testcase Open Image Scanners doc page (goharbor#22180)

Signed-off-by: stonezdj <[email protected]>

* Don't always skip vuln check when artifact is not scannable (goharbor#22187)

fixes goharbor#22143

This commit makes update to the vulnerable policy middleware.  So that
it will skip the sheck only when the artifact is not scannable AND it
does not have a scan report.

Signed-off-by: Daniel Jiang <[email protected]>

* Display download url for BUILD_PACKAGE action (goharbor#22197)

Signed-off-by: stonezdj <[email protected]>

* add the replicaiton adapter whitelist (goharbor#22198)

fixes goharbor#21925

According to https://github.com/goharbor/harbor/wiki/Harbor-Replicaiton-Adapter-Owner, some replication adapters are no longer actively maintained by the Harbor community. To address this, a whitelist environment variable is introduced to define the list of actively supported adapters, which will be used by the Harbor portal and API to display and allow usage.

If you still wish to view and use the unsupported or inactive adapters, you must manually update the whitelist and include the desired adapter names. For the list of adapter names, refer to https://github.com/goharbor/harbor/blob/main/src/pkg/reg/model/registry.go#L22

Signed-off-by: wang yan <[email protected]>

* fix: correct the permission of project maintainer role for webhook policy (goharbor#22135)

Signed-off-by: chlins <[email protected]>

* update the orm filter func (goharbor#22208)

to extend the enhancement from goharbor#21924 to fuzzy and range match. After the enhance, the orm.ExerSep is not supported in any sort of query keywords.

Signed-off-by: wy65701436 <[email protected]>

* bump golang version (goharbor#22205)

to the latest golang version v1.24.5 from v1.24.3

Signed-off-by: wy65701436 <[email protected]>

* Add HTTP 409 error when creating robot account (goharbor#22201)

fixes goharbor#22107

Signed-off-by: stonezdj <[email protected]>

* feat: support raw format for CNAI model (goharbor#22040)

Signed-off-by: chlins <[email protected]>

* The tag retention job failed with 403 error message (goharbor#22159)

fixes goharbor#22141

Signed-off-by: stonezdj <[email protected]>

* remove extra build_base=false && pull_base_from_dockerhub=false check logic (goharbor#22233)

remove extra build_base=false && pull_base_from_dockerhub=false logic
we do not block the case using local chached image(docker build --pull=false) while build_base=false
However we need gurantee always pull latest image while build package
And when there's some rate limit issue in the CICD situation we could set pull_base_from_dockerhub=false

Signed-off-by: my036811 <[email protected]>

* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.19 to 1.1.25 in /src (goharbor#22225)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.19 to 1.1.25.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.19...v1.1.25)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <[email protected]>

* Delete local cache if the artifact doesn't exist in upstream registry (goharbor#22175)

fixes goharbor#20596

Signed-off-by: stonezdj <[email protected]>

* update the support list of proxy cache (goharbor#22237)

According to PR goharbor#22198, some inactive adapters have been removed from the default adapter list.
This pull request updates PERMITTED_REGISTRY_TYPES_FOR_PROXY_CACHE accordingly, since the list of proxy cache adapters should be a subset of the replication adapters.

Signed-off-by: wy65701436 <[email protected]>

* bump go version (goharbor#22238)

* feat: Single Active Replication (goharbor#21347)

feat(replication): add Single Active Replication per policy

* Added single_active_replication field to schema & DB table
* Updated API, controller & handler to enforce single execution per policy
* Added checkbox in UI to enable/disable single_active_replication for a
  policy
* Implemented necessary backend & frontend tests
* Prevents parallel runs per policy if single_active_replication is enabled

Signed-off-by: bupd <[email protected]>

* bump base verson for v2.15.0 (goharbor#22241)

Signed-off-by: wy65701436 <[email protected]>

* build base images (goharbor#22249)

1, downgrade the base version to 2.14, and update it whenever we have the release-2.14.0 branch.
2, refresh the base images bses on the latest code.

Signed-off-by: wy65701436 <[email protected]>

* Upload build logs to github artifact (goharbor#22223)

Upload log files to github with 5 day retention

Signed-off-by: stonezdj <[email protected]>

* add prepare migration script for 2.14.0 (goharbor#22247)

Signed-off-by: my036811 <[email protected]>

* chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in /src (goharbor#22258)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.18.4 to 3.18.5.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.18.4...v3.18.5)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump actions/checkout from 3 to 5 (goharbor#22250)

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.25 to 1.1.26 in /src (goharbor#22244)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.25 to 1.1.26.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.25...v1.1.26)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Return the Resport when the scanner is unhealthy (goharbor#22255)

This commit fixes goharbor#22254
It updates the "GetReport" function, such that when the scanner is
unhealthy, and we can't know the the artifact is supported, we will
still try to return the report stored in DB.

Signed-off-by: Daniel Jiang <[email protected]>

* Refine the sql to query non empty repositories (goharbor#22269)

use exists instead of in condition

Signed-off-by: stonezdj <[email protected]>

* chore(deps): bump github.com/beego/beego/v2 from 2.3.6 to 2.3.8 in /src (goharbor#22282)

Bumps [github.com/beego/beego/v2](https://github.com/beego/beego) from 2.3.6 to 2.3.8.
- [Release notes](https://github.com/beego/beego/releases)
- [Changelog](https://github.com/beego/beego/blob/master/CHANGELOG.md)
- [Commits](beego/beego@v2.3.6...v2.3.8)

---
updated-dependencies:
- dependency-name: github.com/beego/beego/v2
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /src (goharbor#22283)

chore(deps): bump github.com/prometheus/client_model in /src

Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.1...v0.6.2)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.1 in /src (goharbor#22281)

chore(deps): bump github.com/cloudevents/sdk-go/v2 in /src

Bumps [github.com/cloudevents/sdk-go/v2](https://github.com/cloudevents/sdk-go) from 2.15.2 to 2.16.1.
- [Release notes](https://github.com/cloudevents/sdk-go/releases)
- [Commits](cloudevents/sdk-go@v2.15.2...v2.16.1)

---
updated-dependencies:
- dependency-name: github.com/cloudevents/sdk-go/v2
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 in /src (goharbor#22243)

chore(deps): bump github.com/go-openapi/swag in /src

Bumps [github.com/go-openapi/swag](https://github.com/go-openapi/swag) from 0.23.0 to 0.23.1.
- [Commits](go-openapi/swag@v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/volcengine/volcengine-go-sdk from 1.1.26 to 1.1.29 in /src (goharbor#22284)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.26 to 1.1.29.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.26...v1.1.29)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update README.md (#48)

Describe whats different in next

Signed-off-by: Vadim Bauer <[email protected]>

* Update README.md (#54)

Signed-off-by: Vadim Bauer <[email protected]>

* feat: daggerize harbor

Signed-off-by: bupd <[email protected]>

* fix: dagger cmds

Signed-off-by: bupd <[email protected]>

* feat: add publish pipeline with dagger

Signed-off-by: bupd <[email protected]>

* fix: pipeline

Signed-off-by: bupd <[email protected]>

---------

Signed-off-by: yuzhipeng <[email protected]>
Signed-off-by: Spyros Trigazis <[email protected]>
Signed-off-by: Daniel Jiang <[email protected]>
Signed-off-by: rgcr <[email protected]>
Signed-off-by: Mooneeb Hussain <[email protected]>
Signed-off-by: stonezdj <[email protected]>
Signed-off-by: my036811 <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: wang yan <[email protected]>
Signed-off-by: chlins <[email protected]>
Signed-off-by: wy65701436 <[email protected]>
Signed-off-by: stonezdj <[email protected]>
Signed-off-by: bupd <[email protected]>
Signed-off-by: Vadim Bauer <[email protected]>
Signed-off-by: Prasanth Baskar <[email protected]>
Co-authored-by: yuzhipeng <[email protected]>
Co-authored-by: Spyros Trigazis <[email protected]>
Co-authored-by: Daniel Jiang <[email protected]>
Co-authored-by: Roger <[email protected]>
Co-authored-by: Moon <[email protected]>
Co-authored-by: stonezdj(Daojun Zhang) <[email protected]>
Co-authored-by: miner <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <[email protected]>
Co-authored-by: Wang Yan <[email protected]>
Co-authored-by: Chlins Zhang <[email protected]>
Co-authored-by: Vadim Bauer <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@chlins chlins chlins left review comments

Copilot code review Copilot Copilot left review comments

@reasonerjt reasonerjt reasonerjt approved these changes

@wy65701436 wy65701436 wy65701436 approved these changes

Assignees

@wy65701436 wy65701436

@OrlinVasilev OrlinVasilev

@chlins chlins

Labels
release-note/update Update or Fix target/2.14.0
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
5 participants
@stonezdj @reasonerjt @wy65701436 @chlins @OrlinVasilev