Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require Jenkins 2.426.3 or newer #1581

Merged

Commits on May 5, 2024

  1. Require Jenkins 2.426.3 or newer

    https://stats.jenkins.io/pluginversions/git.html shows that 82% of the
    125k installations of the 5.2.1 release (most recent, 6 months old)
    are already running 2.426.3 or newer.
    
    https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314 was
    published in Jan 2024 and strongly recommends that users upgrade to
    2.426.3 or newer.
    MarkEWaite committed May 5, 2024
    Configuration menu
    Copy the full SHA
    76f3f26 View commit details
    Browse the repository at this point in the history
  2. Test with promoted-builds 940.va_9b_59a_717a_b_1

    Removes the dependency on project-inheritance.  Previous releases resolved
    the security issue that was still open in 3.11.
    MarkEWaite committed May 5, 2024
    Configuration menu
    Copy the full SHA
    8d618a2 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    cae656e View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    8d01a98 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    d0a631d View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. Configuration menu
    Copy the full SHA
    c71cb3a View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    9cfa0d3 View commit details
    Browse the repository at this point in the history
  3. Bump promoted-builds optional dependency to 892.vd6219fc0a_efb

    892.vd6219fc0a_efb was released 2 years ago.  Over 50% of all
    installations of the promoted builds plugin are already using
    892.vd6219fc0a_efb or newer.  Those users will see no difference from
    this change, since they are already using 892.vd6219fc0a_efb.
    
    Recent Jenkins versions will display broken icons with
    older versions of the promoted builds plugin.  Fixed in
    jenkinsci/promoted-builds-plugin#170 as part
    of 873.v6149db_d64130.  Upgrading to 892.vd6219fc0a_efb will fix that
    issue for users.
    
    https://stats.jenkins.io/pluginversions//promoted-builds.html shows that
    892.vd6219fc0a_efb is the second most popular release.  It is second
    only to the most recent release, 945.v597f5c6a_d3fd.  Attempts to update
    that optional dependency to the most recent release have shown consistent
    failures in the plugin bill of materials.
    
    * jenkinsci/bom#3170
    * jenkinsci/bom#2809
    
    This likely needs to be combined with the parameterized trigger plugin
    upgrade of the same dependency to the same version.  Refer to
    
    * jenkinsci/parameterized-trigger-plugin#378
    
    Bumps [promoted-builds](https://github.com/jenkinsci/promoted-builds-plugin) from 3.11 to 892.vd6219fc0a_efb
    - [Release notes](https://github.com/jenkinsci/promoted-builds-plugin/releases/tag/892.vd6219fc0a_efb)
    MarkEWaite committed May 6, 2024
    Configuration menu
    Copy the full SHA
    466cf96 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    7552457 View commit details
    Browse the repository at this point in the history