GitLab

Signed-off-by: Daniel Jiang <jiangd@vmware.com>

refactor(event): change default operator to username of security

Signed-off-by: Ziming Zhang <zziming@vmware.com>

fix db migration issue

Signed-off-by: He Weiwei <hweiwei@vmware.com>

fixes #12827
 After user migrates Harbor from v2.0.2, user got 404 when to pull specific images, and no work after push the same images again.

 Fix:
 1, If the issue is caused by missing repository data, this fix can revert the missing repository data and all things should be fine.
 2, If the issue is caused by missing blob data, this fix can revert the missing repository data and still left the media type of artifact
    as 'UNKNOWN', which leads the meta data and build history of the image cannot be shown in UI. User can delete and push the image again to
    resolve it.
Signed-off-by: wang yan <wangyan@vmware.com>

Fix schedule error msg.

fix(p2p): disable change provider vendor type

Signed-off-by: Ziming Zhang <zziming@vmware.com>

Signed-off-by: fanjiankong <fanjiankong@tencent.com>

Signed-off-by: chlins <chlins.zhang@gmail.com>

Fix UI issues found on round-2 testing day

Signed-off-by: AllForNothing <sshijun@vmware.com>

fix(quota): change log to debug level when warning not found

fixes #12849

1, gives a default value to blob status in the migration script, and use none to replace the empty string as
the StatusNone, that will more readable on debugging failure.

2, GC jobs marks all of blobs as StatusDelete in the mark phase, but if encounter any failure in the sweep phase,
GC job will quite and all of blobs are in StatusDelete. If user wants to execute the GC again, it will fail as the
StatusDelete cannot be marked as StatusDelete. So, add StatusDelete in the status map to make StatusDelete can be
marked as StatusDelete.
Signed-off-by: wang yan <wangyan@vmware.com>

Closes #12861
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Add id column to data_migration table

Add distribution UI test in nightly

Fix schema of the portal health check

This is the maintenance release to recompile the trivy
adapter service with Go 1.14.7 and pull Trivy v0.9.2.
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>

Update all references of Golang to 1.14.7

1. Add proxy-cache UI test in nightly;
2. Add distribution UI test in nightly.
Signed-off-by: danfengliu <danfengl@vmware.com>

In the previous change #12809 I missed a few places. This
should be complete now.
Signed-off-by: Dirk Mueller <dirk@dmllr.de>
Signed-off-by: Dirk Mueller <dmueller@suse.com>

upgrade robotframework in git action

1. upgrade robotframework in git action
2. Re-script ldap API script:test_assign_role_to_ldap_group.py
Signed-off-by: danfengliu <danfengl@vmware.com>

chore(clair): bump up clair adapter to v1.1.1

Signed-off-by: guanxiatao <guanxiatao@corp.netease.com>

Add id column to data_migration table and add logic to make sure there is only one data version record
Signed-off-by: Wenkai Yin <yinw@vmware.com>

CSRF token cookie -> header 

Signed-off-by: He Weiwei <hweiwei@vmware.com>

Signed-off-by: AllForNothing <sshijun@vmware.com>

The current approach will prevent the effectiveness of `Cache-Control`
header and gorilla's library add `Vary:Cookie` header in all responses.

We will set the token in a header of response so the response can be
cached when needed.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

We should use a golang that isn't having security issues.

This includes:
* go1.14.6 (released 2020/07/16) includes fixes to the go command, the
compiler, the linker, vet, and the database/sql, encoding/json,
net/http, reflect, and testing packages. See the Go 1.14.6 milestone on
our issue tracker for details.

* go1.14.7 (released 2020/08/06) includes security fixes to the
encoding/binary package. See the Go 1.14.7 milestone on our issue
tracker for details (CVE-2020-16845)
Signed-off-by: Dirk Mueller <dirk@dmllr.de>
Signed-off-by: Dirk Mueller <dmueller@suse.com>

Fix issues with label target 2.1 and RC

Refresh the status of execution for every status changing of task

Upload the harbor log icon as it's referenced by the released Harbor chart
Signed-off-by: Wenkai Yin <yinw@vmware.com>

udpate resource list order

Signed-off-by: AllForNothing <sshijun@vmware.com>

it should be https
Signed-off-by: DQ <dengq@vmware.com>