harbor v2.14.6

What’s Changed

Component updates ⬆️

• bump base version for v2.14.6 by @wy65701436 in https://github.com/goharbor/harbor/pull/24115
• Release 2.14 bump go trivy distribution by @wy65701436 in https://github.com/goharbor/harbor/pull/24122
• fix(webhook): allow private network access by default (#24082) by @wy65701436 in https://github.com/goharbor/harbor/pull/24129
• fix(prepare): expose the legacy signer pull switch in harbor.yml (#24… by @wy65701436 in https://github.com/goharbor/harbor/pull/24130
• Cherry pick upload location origin 2.14 (#24114) by @wy65701436 in https://github.com/goharbor/harbor/pull/24131
• fix(contenttrust): allow legacy signer pull by default to avoid regre… by @wy65701436 in https://github.com/goharbor/harbor/pull/24132
• (cherry-pick) support configurable PIP_INDEX_URL for swagger client build and make openapi-generator-cli download URL configurable by @stonezdj in https://github.com/goharbor/harbor/pull/24150
• [release-2.14] fix(cnai-parser): enforce actual byte limit to prevent decompression (#23497) by @Vad1mo in https://github.com/goharbor/harbor/pull/24143
• [release-2.14] fix: avoid panic in user audit event resolver on nil event data (#23461) by @Vad1mo in https://github.com/goharbor/harbor/pull/24152
• chore(deps): upgrade Go dependencies to fix High and Critical CVEs by @stonezdj in https://github.com/goharbor/harbor/pull/24190
• bump: bump Go to 1.26.10 for release-2.14.0 by @stonezdj in https://github.com/goharbor/harbor/pull/24199

Full Changelog: https://github.com/goharbor/harbor/compare/v2.14.5…v2.14.6

---

Source goharbor/harbor · v2.14.6 · 2026-10-23 · upstream release

Mirrored verbatim for indexing. All rights belong to the upstream project.