CVE Fixes for 2.14

.final_builds/jobs/harbor/index.yml

@@ -1,4 +1,8 @@
 builds:
+  325c0cacd1e75a6d5685de18e6fa4488fb6f042ebbcfa68262f274e71e185dc4:
+    version: 325c0cacd1e75a6d5685de18e6fa4488fb6f042ebbcfa68262f274e71e185dc4
+    blobstore_id: d1dfc770-ec49-4285-4952-e08b94bab3a0
+    sha1: sha256:165c85ea0e3a6676ec74060c35a89c1c69ccff668e8b661fe0f45dc5d614757e
   40fdf785b5fe2728441317ec82fe4e1f15e6eb17:
     version: 40fdf785b5fe2728441317ec82fe4e1f15e6eb17
     blobstore_id: ff4e7286-6182-4632-7565-5eee6a618150

.final_builds/packages/busybox/index.yml

@@ -1,4 +1,8 @@
 builds:
+  52dab9c3bf6a92a7b1f44bec4bc3f8538d698000f42f7ce55628be3dfddf60dd:
+    version: 52dab9c3bf6a92a7b1f44bec4bc3f8538d698000f42f7ce55628be3dfddf60dd
+    blobstore_id: 4c283192-4cce-4460-6bd8-6fcfa2b31b82
+    sha1: sha256:6493365f74472d87ef57d5296c8a5255451880d21b3fa6ae173ce1f2960f11f1
   a94b30c2d40810e6779a19a59b8fefc445d61df635c47a23bfa74d4bd8616097:
     version: a94b30c2d40810e6779a19a59b8fefc445d61df635c47a23bfa74d4bd8616097
     blobstore_id: ff5a87e3-2c13-4564-6f3e-1b7f10a1a49c

.final_builds/packages/nfs-common/index.yml

@@ -15,6 +15,10 @@ builds:
     version: aa99c9b13a5a3256a11952d918a5438b357f75a4
     blobstore_id: 80b93b90-7fa3-49c6-70c8-5b1681825f6d
     sha1: 0b47409a1d41e4af1948a2f26743b3b78cceb85b
+  c5518cc6aee51e811780001136350eefe449c159117826453f4084c1a25e6d96:
+    version: c5518cc6aee51e811780001136350eefe449c159117826453f4084c1a25e6d96
+    blobstore_id: 2d5165ab-0dcf-4802-7b2a-c2f238fb459a
+    sha1: sha256:16a1e1fbd796c476101db5f30332e27ff805a11ef683903aed08205b18d123d4
   e2d32ae199c06a4b6d8e438b39a0ec21a0ee28e9dd92fd36edbbf9953905e829:
     version: e2d32ae199c06a4b6d8e438b39a0ec21a0ee28e9dd92fd36edbbf9953905e829
     blobstore_id: 02da70e1-b5ae-49dd-5150-284e590311d2

Makefile

@@ -9,7 +9,7 @@ SMOKETEST_BIN_PATH=/harbor-boshrelease/make/smoke_test
 DOCKERCMD=$(shell which docker)
 
 GOBUILDPATHINCONTAINER=/harbor-boshrelease
-GOBUILDIMAGE=golang:1.14.7
+GOBUILDIMAGE=golang:1.25.5
 
 compile_smoke_test:
 	@echo "compiling binary for smoke_test..."

go.mod

@@ -1,3 +1,3 @@
 module github.com/vmware/harbor-boshrelease
 
-go 1.13
+go 1.25.5

jobs/wavefront/templates/config/docker-compose.yml.erb

@@ -12,7 +12,7 @@ services:
       - HOST_MOUNT_PREFIX=/hostfs
       - HOST_PROC=/hostfs/proc
   wavefront-proxy:
-    image: wavefronthq/proxy:12.0
+    image: wavefronthq/proxy:13.7
     pull_policy: never
     environment:
       - WAVEFRONT_URL=<%= p("wavefront_url") %>

packages/busybox/spec.lock

@@ -0,0 +1,2 @@
+name: busybox
+fingerprint: 52dab9c3bf6a92a7b1f44bec4bc3f8538d698000f42f7ce55628be3dfddf60dd

releases/harbor-container-registry/harbor-container-registry-2.14.0-build.4.yml

@@ -0,0 +1,120 @@
+name: harbor-container-registry
+version: 2.14.0-build.4
+commit_hash: non-git
+uncommitted_changes: false
+jobs:
+- name: docker
+  version: 781c17b950dd9bb2c90775c8056bf600af57301306e3c801f10f33fa4edff6fc
+  fingerprint: 781c17b950dd9bb2c90775c8056bf600af57301306e3c801f10f33fa4edff6fc
+  sha1: sha256:6cf75d51397ea065742940e560da629ca63c464351be9296f49073daa980a3f4
+  packages:
+  - common
+  - docker
+- name: enable-bosh-dns
+  version: 2bb1026b18d076ecb97dfec366e36fcdd7714268d9dfc530660f568002296e30
+  fingerprint: 2bb1026b18d076ecb97dfec366e36fcdd7714268d9dfc530660f568002296e30
+  sha1: sha256:9d3a7030919cfdd1589ecc3f61cea7a122fb9d6a44ed720a12d83f51c59d1487
+  packages: []
+- name: harbor
+  version: 325c0cacd1e75a6d5685de18e6fa4488fb6f042ebbcfa68262f274e71e185dc4
+  fingerprint: 325c0cacd1e75a6d5685de18e6fa4488fb6f042ebbcfa68262f274e71e185dc4
+  sha1: sha256:165c85ea0e3a6676ec74060c35a89c1c69ccff668e8b661fe0f45dc5d614757e
+  packages:
+  - common
+  - harbor-common
+  - docker-compose
+  - harbor-app
+  - uaa
+  - python
+  - nfs-common
+- name: harbor-dns-aliases
+  version: a63e4ce306ea36c0251c4643df500b0ab8c79bf5a2b9dbf1aaaa00067a0c2b3f
+  fingerprint: a63e4ce306ea36c0251c4643df500b0ab8c79bf5a2b9dbf1aaaa00067a0c2b3f
+  sha1: sha256:05111457e797e510151595946c883b9f75e4c2cd3face6d19f2e22360f4edc58
+  packages: []
+- name: smoke-test
+  version: 76039b4bb0b67786bb306473d8064327d411031c67431008d973347ac6fe9045
+  fingerprint: 76039b4bb0b67786bb306473d8064327d411031c67431008d973347ac6fe9045
+  sha1: sha256:7f98cb724654d94982586e8abfbfe0ed6919636570c72fef1cb75b38fc1e5c75
+  packages:
+  - smoke-test
+  - docker
+  - busybox
+- name: uaa-deregistration
+  version: 1dd448ce76d5cb9c5b4c9fbac21dac6acc5b520df3e8e19db94001f88c3e672b
+  fingerprint: 1dd448ce76d5cb9c5b4c9fbac21dac6acc5b520df3e8e19db94001f88c3e672b
+  sha1: sha256:ab6f1c91b8811255b3363e235177621d230491d59a042cfc1f56bc7cb08b5c75
+  packages:
+  - common
+  - uaa
+- name: wavefront
+  version: 3dd84f7ac2cf232ede4885f1d7b05f35dc25fd857342cf960acf239914e4a239
+  fingerprint: 3dd84f7ac2cf232ede4885f1d7b05f35dc25fd857342cf960acf239914e4a239
+  sha1: sha256:ba8140cfbdbbfd0e9ab4e645afa3a734af96b6936f0b46c34ebb7cd19a6ad2fb
+  packages:
+  - common
+  - docker-compose
+  - wavefront
+packages:
+- name: busybox
+  version: a94b30c2d40810e6779a19a59b8fefc445d61df635c47a23bfa74d4bd8616097
+  fingerprint: a94b30c2d40810e6779a19a59b8fefc445d61df635c47a23bfa74d4bd8616097
+  sha1: sha256:2df1b987ab73cad7fb5607b25e48dda7427371923d69d1fed1040f5427a2e56a
+  dependencies: []
+- name: common
+  version: 1ee9dd03e6d818e2158fd430c06e81ca519f9fde706dcb8359fc22db1d2f0f50
+  fingerprint: 1ee9dd03e6d818e2158fd430c06e81ca519f9fde706dcb8359fc22db1d2f0f50
+  sha1: sha256:6c19888f88de729f23f251e4abde548df33a3afa8e15888167fc5fdeeaa76aff
+  dependencies: []
+- name: docker
+  version: ed5ca3b973d181a2418b190bf159a425fbc265fe9cb117ca4957ef995a888e6f
+  fingerprint: ed5ca3b973d181a2418b190bf159a425fbc265fe9cb117ca4957ef995a888e6f
+  sha1: sha256:cf9d40b587a1300d88f59fd6ae60defd1fed4c5682be6b0d94023fb5a6596535
+  dependencies:
+  - common
+- name: docker-compose
+  version: 3ff5126d2d7d1aaa2847bb5021a02794fc022734977e1e618448acedf5ae3285
+  fingerprint: 3ff5126d2d7d1aaa2847bb5021a02794fc022734977e1e618448acedf5ae3285
+  sha1: sha256:659859f3fa530a7b27713ba151b927b2ac470b93b2685e978c01ec01631079e4
+  dependencies: []
+- name: harbor-app
+  version: 443add13cc6dedcec5f5194832c15799e339a62451290988f0d82fd44282b7d2
+  fingerprint: 443add13cc6dedcec5f5194832c15799e339a62451290988f0d82fd44282b7d2
+  sha1: sha256:710c7fe25b9af424cf7d007654fc1710d1d9ed42654495d803d3859ff242e606
+  dependencies:
+  - harbor-common
+- name: harbor-common
+  version: 5e4d9f01ef7ea1c3acf7a1385166e5bbc93ff6b6b135835a222e5f9542d6c779
+  fingerprint: 5e4d9f01ef7ea1c3acf7a1385166e5bbc93ff6b6b135835a222e5f9542d6c779
+  sha1: sha256:eadf8ef60c3f0636ff2bc4b35e3319a194e6536fca614d27e42cedf8b44c63cc
+  dependencies:
+  - common
+- name: nfs-common
+  version: c5518cc6aee51e811780001136350eefe449c159117826453f4084c1a25e6d96
+  fingerprint: c5518cc6aee51e811780001136350eefe449c159117826453f4084c1a25e6d96
+  sha1: sha256:16a1e1fbd796c476101db5f30332e27ff805a11ef683903aed08205b18d123d4
+  dependencies: []
+- name: python
+  version: 55dd29a987017f40d92819b42bd3d1614d31d2d4c47e87d534d70602e54b7dcc
+  fingerprint: 55dd29a987017f40d92819b42bd3d1614d31d2d4c47e87d534d70602e54b7dcc
+  sha1: sha256:d4ebc6c647abadf6e6815023242eb965aba896a69cb349021a8eb1dfe0a50b39
+  dependencies: []
+- name: smoke-test
+  version: 3e064176740b68cd1f482ae51b5102499e455a2fb31da5a4f449e24ffa11510e
+  fingerprint: 3e064176740b68cd1f482ae51b5102499e455a2fb31da5a4f449e24ffa11510e
+  sha1: sha256:5e69a9284d7afa6c3646d0f8d2133047dfe522d5d182f1a9edfbcc8f6d5fd4db
+  dependencies: []
+- name: uaa
+  version: edf355df11e873d210b2d4ac3c2c6cbc8e59093f74c8114c5aab406d647a56c2
+  fingerprint: edf355df11e873d210b2d4ac3c2c6cbc8e59093f74c8114c5aab406d647a56c2
+  sha1: sha256:2a81bce7bff313c8929236b55d8417e7a1b480f130a25b31b9a1443347a1d07f
+  dependencies: []
+- name: wavefront
+  version: 0646a0f66123cfdbdbb13bc0b17f712fe29339c6ea71f75ee6fb59f6af1e5974
+  fingerprint: 0646a0f66123cfdbdbb13bc0b17f712fe29339c6ea71f75ee6fb59f6af1e5974
+  sha1: sha256:0e2b0fd905e49ef1b8cffe601670837f99723ef83593624594ffe5dc0e34850d
+  dependencies: []
+license:
+  version: cfb2ebdebfb2fa4ad6803d8580bba0ee32cd33c1d2f9933267bb4fd4de0f6c26
+  fingerprint: cfb2ebdebfb2fa4ad6803d8580bba0ee32cd33c1d2f9933267bb4fd4de0f6c26
+  sha1: sha256:66e25ff81aa72686464494dc75a086d6031a00cde7271023fa4b9446aac01fea

releases/harbor-container-registry/index.yml

@@ -9,6 +9,8 @@ builds:
     version: 2.11.1
   734c96ab-04ac-452f-4d85-7300469a7b71:
     version: 1.7.5-build.10
+  937e6210-4dca-4cfa-54b6-eb83c27081b7:
+    version: 2.14.0-build.4
   ae48cdb7-eca2-4bc9-494f-c6c77eda45a0:
     version: 1.8.2
   bff26920-ae15-4c8b-494d-07b0abd347d4: