Commit Graph

12395 Commits

Author SHA1 Message Date
miner 9384ed0e47
downgrade gorilla go mod on release-2.13.0 (#22023)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
downgrade gorilla go mod on reelase-2.13.0

Signed-off-by: my036811 <miner.yang@broadcom.com>
2025-05-22 07:36:08 +00:00
Wang Yan af4843729c
build base images for v2.13.0 (#22013)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-20 05:47:24 +00:00
Wang Yan 647842f419
[cherry-pick] udpate storage to s3 (#21999) (#22002)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
udpate storage to s3 (#21999)

move the build storage from google storage to the CNCF S3 storage

Currently, we use the internal GCR to store all dev builds for nightly testing, development, and as candidates for RC and GA releases. However, this internal Google storage will no longer be available, this pull request it to move to the CNCF-hosted S3 storage.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-19 10:56:10 +08:00
Daniel Jiang b8ee76373f
Pin trivy adapter to the GA version v0.33.1 (#21997)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2025-05-15 06:40:04 +00:00
Daniel Jiang 9a932a0f9a
Bump up Trivy adapter for v2.13.x (#21984)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2025-05-09 09:16:20 +00:00
Prasanth Baskar abc5e55ea9
[cherry-pick] Fix: Helm Chart Copy Button in UI (#21983)
Fix: Helm Chart Copy Button in UI (#21969)

* fix: helm chart copy btn in UI



* add: tests for pull command component in UI



---------

Signed-off-by: bupd <bupdprasanth@gmail.com>
2025-05-09 06:28:03 +00:00
Wang Yan 785b60bcbe
bump dependencies of golang (#21978)
Build Package Workflow / BUILD_PACKAGE (push) Waiting to run Details
Code scanning - action / CodeQL-Build (push) Waiting to run Details
Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-08 09:48:10 +00:00
Wang Yan 6d3bf31364
build base images for v2.13.1 (#21976)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-08 16:05:44 +08:00
Wang Yan 4170738322
upgrade the build machine to ubuntu 22 (#21975)
Per https://github.com/actions/runner-images/issues/11101, the ububnu 20.04 is out of support. This change it up the git action machine to 22.04

Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-08 14:57:53 +08:00
Wang Yan 028b393112
bump base version for v2.13.1 (#21965)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-06 17:15:06 +08:00
Wang Yan c130e3d539
[cherry-pick] unify the golang image version (#21936)
unify the golang image version

Make the golang version as a unified parameter to build all harbor components

Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-27 07:11:13 +00:00
Wang Yan a37118f518
[cherry-pick]revise make file for lint api (#21932)
revise make file for lint api

Decouple the lint from the api generation step in the makefile.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-25 19:23:01 +08:00
Wang Yan 40e78d5545
[cherry-pick] enhance the query judgement (#21927)
enhance the query judgement

the query parameter cannot contains orm.ExerSep which is key characters that used by orm.
the pull request enhances the validation for query parameters.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-24 19:16:43 +08:00
Wang Yan 05d5b64ff9
update trivy scan branch (#21918)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-24 15:02:08 +08:00
stonezdj(Daojun Zhang) f019430872
[cherry-pick] Update artifact info (#21907)
update artifact info

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-04-22 13:13:38 +08:00
miner b7e00b2e53
[cherry-pick]fix jobservice container loglevel consistent with job_log (#21875)
Signed-off-by: yminer <miner.yang@broadcom.com>
2025-04-15 14:07:29 +08:00
Wang Yan db1569ae20
build base for v2.13 (#21852)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-09 11:07:48 +08:00
Chlins Zhang 69c62ef41a
[CHERRY-PICK] fix: support preheat cnai model artifact (#21851)
fix: support preheat cnai model artifact

Signed-off-by: chlins <chlins.zhang@gmail.com>
2025-04-08 12:20:42 +00:00
Prasanth Baskar d569ba20d6
[cherry-pick] Update dependencies in Harbor UI (#21848)
Update dependencies in Harbor UI (#21823)

* deps: update src/portal/app-swagger-ui



* deps: update swagger-ui



* deps: update src/portal



---------

Signed-off-by: bupd <bupdprasanth@gmail.com>
2025-04-08 16:12:26 +08:00
stonezdj(Daojun Zhang) f5f912a780
[cherry-pick] Update robot testcase related to security hub row count to 15 by default (#21847)
Update robot testcase related to security hub row count to 15 by default

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-04-08 15:17:55 +08:00
Wang Yan 15f3aabc0d
build base images for v2.13 (#21820)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-03 13:50:41 +08:00
Wang Yan 68eea5f3fd
bump up jwt and beego (#21814)
upgrdes the dependencies to resolve the upstream issues.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-02 09:50:18 +00:00
stonezdj(Daojun Zhang) b60bd1a69b
Update xpath for some UI components (#21817)
Update testcase for audit log enhancement
    Add e2e_setup for e2e testcases

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-04-02 09:12:22 +00:00
stonezdj(Daojun Zhang) 280ab5a027
Rule out the duplicate login event and false logout event for oidc (#21811)
* Ignore the second /c/log_out event

   fix the issue logout event logged twice

Signed-off-by: stonezdj <stone.zhang@broadcom.com>

* Rule out the duplicate login event and false logout event for oidc

Signed-off-by: stonezdj <stonezdj@gmail.com>

---------

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Signed-off-by: stonezdj <stonezdj@gmail.com>
2025-04-02 08:34:38 +00:00
Daniel Jiang 5b28be8252
Bump up trivy and trivy-adapter to fix CVE (#21816)
Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2025-04-02 07:36:51 +00:00
Wang Yan e216f6beb9
bump up golang version (#21813)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-02 13:58:49 +08:00
Chlins Zhang 45d73acec4
chore: format the go.mod (#21812)
Signed-off-by: chlins <chlins.zhang@gmail.com>
2025-04-01 09:36:34 +00:00
Prasanth Baskar 5d776a8a9e
Remove top copy pull cmd button (#21810)
remove top copy pull cmd button

Signed-off-by: bupd <bupdprasanth@gmail.com>
2025-04-01 16:54:47 +08:00
stonezdj(Daojun Zhang) 79a24a42d9
Add operation_descrtion when forward audit log (#21786)
skip to log error message when log endpoint is emtpy

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-04-01 06:02:03 +00:00
Prasanth Baskar 92297189ab
Fix: Modelfs overflow in UI. (#21791)
fix modelfs overflow in UI

Signed-off-by: bupd <bupdprasanth@gmail.com>
2025-04-01 09:59:49 +08:00
Wang Yan dce7d9f5cf
fix orm filterable issue (#21797)
the orm Filterable function always return true even set the tag of the field as false

Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-31 07:11:57 +00:00
stonezdj(Daojun Zhang) 1641c799ed
Add operation description for delete tag event (#21807)
fixes #21798

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-03-31 06:04:55 +00:00
stonezdj(Daojun Zhang) 72c1b9098a
Add tips for "Other events" (#21788)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-03-31 03:15:59 +00:00
miner 33d1a24127
clean up robot account for SBOM Job (#21794)
Signed-off-by: yminer <miner.yang@broadcom.com>
2025-03-28 09:40:50 +00:00
Prasanth Baskar 9cde2c3d78
feat: Persistent Page Size UI (#21627)
* update page size to global

Signed-off-by: bupd <bupdprasanth@gmail.com>

* update page size test

Signed-off-by: bupd <bupdprasanth@gmail.com>

* increase top page size to 100

Signed-off-by: bupd <bupdprasanth@gmail.com>

* fix lint

Signed-off-by: bupd <bupdprasanth@gmail.com>

* increase all page size to 100

* update all other pages to have same size factors

Signed-off-by: bupd <bupdprasanth@gmail.com>

* add page sizes to constants

Signed-off-by: bupd <bupdprasanth@gmail.com>

---------

Signed-off-by: bupd <bupdprasanth@gmail.com>
Co-authored-by: Vadim Bauer <vb@container-registry.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2025-03-27 14:58:20 +00:00
Wang Yan e9a8c05508
fix 21118 (#21792)
fix #21118
In the current robot API, querying with ?q=level=system returns both system and project-level robots.
This change addresses the issue by ensuring that specifying level=system will return only system-level robots.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-27 16:43:13 +08:00
Kostiantyn Yevchuk 9283e762b5
Bump golang.org/x/oauth2 from v0.25.0 to v0.27.0 (#21757)
bump x/oauth2 to 0.27.0

Signed-off-by: Kostiantyn Yevchuk <kostiantyn.yevchuk@gmail.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2025-03-25 10:20:33 +00:00
Wang Yan 68fb789354
update robot log level (#21778)
fix #21762

Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-25 07:14:53 +00:00
dependabot[bot] 9dcf96f8d0
chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 in /src (#21769)
chore(deps): bump github.com/golang-jwt/jwt/v5 in /src

Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-25 06:10:43 +00:00
Wang Yan af4c123f5f
update oidc login log level (#21775)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-25 04:01:04 +00:00
Ian Seyer 0a5ade8faa
Suppress aborthandler (#21479)
* chore(deps): bump go.opentelemetry.io/otel from 1.31.0 to 1.32.0 in /src (#21162)

Bumps [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) from 1.31.0 to 1.32.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.31.0...v1.32.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
Signed-off-by: ianseyer <iseyer@cloudflare.com>

* Suppresses net.http/abortHandler panic

Signed-off-by: ianseyer <iseyer@cloudflare.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: ianseyer <iseyer@cloudflare.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
Co-authored-by: ianseyer <iseyer@cloudflare.com>
Co-authored-by: Daniel Jiang <jiangd@vmware.com>
2025-03-24 14:14:42 +00:00
Dee Kryvenko 87b9751d1c
Fix token service returning empty token on tls certificate issue without any error (#20081)
Signed-off-by: Dee Kryvenko <dee@selfcloud.tech>
Co-authored-by: Wang Yan <wangyan@vmware.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
Co-authored-by: Vadim Bauer <vb@container-registry.com>
2025-03-24 13:14:59 +00:00
dependabot[bot] ca825df27f
chore(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.2 in /src (#21745)
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.17.0 to 3.17.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.17.0...v3.17.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
2025-03-24 10:11:45 +00:00
dependabot[bot] 7d1726afd6
chore(deps): bump golang.org/x/net from 0.34.0 to 0.37.0 in /src (#21744)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.34.0 to 0.37.0.
- [Commits](https://github.com/golang/net/compare/v0.34.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 11:33:40 +02:00
dependabot[bot] 3d21dd29f1
chore(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /src (#21731)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.34.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.34.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 06:59:45 +00:00
Zhaoxinxin c806b7e787
fix: Remove top error message about no README or license (#21754)
fix: Remove top error message about no README or license

Signed-off-by: zhaoxinxin <1186037180@qq.com>
2025-03-24 13:56:46 +08:00
Wang Yan b6c083d734
fix logout redirect (#21765)
For the default redirection, to the sign page.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-21 11:10:32 +00:00
dependabot[bot] bcfc1d8179
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.57.0 to 0.60.0 in /src (#21716)
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.57.0 to 0.60.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.57.0...zpages/v0.60.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2025-03-21 08:58:37 +00:00
Wang Yan 4f56f5d278
redirect to the sign-in page (#21764)
If redirect to the root page, harbor UI will redirect to the OIDC login page automaticlly.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-21 16:20:50 +08:00
Chlins Zhang b37da544d2
fix: limit the file size of the cnai model processor (#21759)
Signed-off-by: chlins <chlins.zhang@gmail.com>
2025-03-21 15:17:31 +08:00