Page 5

• 

  Linux containers rebuilt

  A Jenkins job mistakenly rebuilt the Linux container images for recent Jenkins weekly releases and recent Jenkins LTS releases. Users that downloaded some of those Linux container images received container images that could not run the Jenkins controller. The incorrect container images would fail to run with the message that Jenkins is not supported with Java 8. Running with Java 8 from /usr/lib/jvm/java-1.8-openjdk/jre, which...

  

  Mark Waite

  

  Damien DUPORTAL August 22, 2023
• 

  Jenkins July 2023 Newsletter

  Key Takeaways A Jenkins Core security advisory was published on July 26 The official documentation has migrated to Java 17 Operating system end of life notifications have been added Contributed by: Wadeck Follonier During July, there were two Security Advisories published: Plugin security advisory published on July 12 Multiple high-score vulnerabilities A total of 16 plugins were affected Jenkins core and plugins security advisory published on July 26 The highest...

  

  Damien DUPORTAL

  

  Mark Waite

  

  Bruno Verachten

  

  Wadeck Follonier

  

  Kevin Martens

  

  Alyssa Tong August 2, 2023
• 

  Java 17 usage in Jenkins.io Documentation

  Jenkins has fully supported Java 17 since the 2.357 weekly release and 2.361.1 Long Term Support release. For this reason, we have transitioned to using Java 17 in the Jenkins user handbook. This includes the installation guides, Pipeline documentation, and Pipeline syntax. Refer to the GitHub issue for additional information and insight. Background Debian 12 was released on June 10, 2023, and it no longer...

  

  Kevin Martens August 1, 2023
• 

  Jenkins in Google Summer of Code Midterm Recap

  The Jenkins in GSoC program recently reached its midterm milestone for GSoC 2023. This milestone served to assess performance, and precipitate pass/fail decisions. Taking time to evaluate the progress and workflow of the project provides an opportunity to correct course and address underlying issues. Earlier this month, on the Jenkins Online Meetup, GSoC contributors presented midterm status and progress for their projects, below...

  

  Ashutosh Saxena

  

  Harsh Pratap Singh

  

  Jagruti Tiwari

  

  Vandit Singh July 22, 2023
• 

  Third Party Repository Detection Probe

  Introduction A third-party repository is a repository that is not hosted at https://repo.jenkins-ci.org/. The Jenkins Infra team was concerned about the dependencies used by third-party repositories. These repositories are a concern, not just for security reasons, but also for reliability. The third-party repository detection probe ensures that plugins are built only from trusted and reliable Maven repositories. Importance of the probe This probe was requested by...

  

  Jagruti Tiwari July 20, 2023
• 

  Unreleased Production Changes Probe

  Introduction A bug fix, security fix, or new features are of no use unless they are released. A production release not only provides users with an updated plugin, but also gives the developers a chance to get feedback on their work. The "unreleased production changes" probe looks for unreleased commits in the production files. If an unreleased file is found in the production path,...

  

  Jagruti Tiwari July 16, 2023
• 

  Security Scan Probe

  Introduction The Jenkins Security team offers a GitHub action that automatically scans the plugin source code during Continuous Integration and reports security issues. The Jenkins community considers using such tools to ensure a high-security level for plugins as a good practice. The Security Scan probe identifies whether the plugin is configured to execute the security action. Importance of the Probe This probe is essential from...

  

  Jagruti Tiwari July 16, 2023
• 

  Post Mortem of the 7th July 2023 Jenkins Infrastructure Outage

  On Friday 7th of July 2023, the Jenkins infrastructure suffered a major outage from 11:05am UTC until 15:25pm UTC with complete downtime of the following public services: accounts.jenkins.io fallback.get.jenkins.io get.jenkins.io incrementals.jenkins.io javadoc.jenkins.io plugin-health.jenkins.io plugin-site-issues.jenkins.io plugins.origin.jenkins.io plugins.jenkins.io rating.jenkins.io repo.azure.jenkins.io reports.jenkins.io stories.jenkins.io uplink.jenkins.io weekly.ci.jenkins.io www.origin.jenkins.io We also had complete downtime of the following non-public services: ldap.jenkins.io previews of *.jenkins.io pull requests (infra.ci.jenkins.io) In addition, there was disruption (partial or complete) of the following services: ci.jenkins.io infra.ci.jenkins.io issues.jenkins.io plugins.jenkins.io repo.jenkins-ci.org www.jenkins.io The public IPs of these services changed (DNS records...

  

  Damien DUPORTAL July 12, 2023
• 

  Jenkins June 2023 Newsletter

  Key Takeaways Red Hat Enterprise Linux 7, and derivatives like CentOS 7, reach early end of life. Upgrades and improvements of Jenkins components continue with significant progress towards the eventual removal of Prototype.js from Jenkins core. Thanks to a kind donation from Launchable, pull requests to Jenkins core now complete their evaluation builds in 2 hours rather than the 6 hours that were...

  

  Damien DUPORTAL

  

  Mark Waite

  

  Bruno Verachten

  

  Wadeck Follonier

  

  Kevin Martens July 10, 2023