Page 3

• Jenkins: Shifting Gears

  Kohsuke here. This is a message for my fellow Jenkins developers. Jenkins has been on an amazing run, but I believe we are trapped in a local optimum, and losing appeal to people who fall outside of our traditional sweet spot. We need to take on new efforts to solve this. One is “cloud native Jenkins” that creates a flavor of Jenkins...

  

  Kohsuke Kawaguchi August 31, 2018
• Jenkins 2.121.3 and 2.138 security updates

  We just released security updates to Jenkins, versions 2.138 and 2.121.3, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. Subscribe to the jenkinsci-advisories mailing list to receive important notifications related to Jenkins security....

  Daniel Beck August 15, 2018
• Security updates for Jenkins core

  We just released security updates to Jenkins, versions 2.133 and 2.121.2, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. Subscribe to the jenkinsci-advisories mailing list to receive important notifications related to Jenkins security....

  Daniel Beck July 18, 2018
• Security Hardening: New API token system in Jenkins 2.129+

  About API tokens Jenkins API tokens are an authentication mechanism that allows a tool (script, application, etc.) to impersonate a user without providing the actual password for use with the Jenkins API or CLI. This is especially useful when your security realm is based on a central directory, like Active Directory or LDAP, and you don’t want to store your password in scripts. Recent versions...

  

  Wadeck Follonier July 2, 2018
• New design, UX and extensibility digest for login page et. al.

  This blog post gives an introduction to the new design for the login and signup forms and Jenkins is (re)starting pages introduced in Jenkins 2.128. The first part of the blog post is an introduction to the new design and UX for Jenkins users. The later part is talking about extensibility in a more technical manner, aimed at plugin developers. Overview The recent changes...

  Thorsten Scherler June 27, 2018
• Running Jenkins with Java 10 and 11 (experimental support)

  Please refer to Installing Jenkins documentation to have the up-to-date details on how to run Jenkins on Java 11. Guidelines in this blogpost are rendered obsolete by the Java 11 Support Preview Availability announcement on Dec 13, 2018 and by the Java 11 GA release on Sep 25, 2018. Refer to Java support page for up-to-date information about running Jenkins with Java 11. The Jenkins...

  

  Oleg Nenashev June 17, 2018
• Security updates for Jenkins core and plugins

  We just released security updates to Jenkins, versions 2.121 and 2.107.3, that fix multiple security vulnerabilities. Additionally, we announce previously published security issues and corresponding fixes in these plugins: Black Duck Hub Groovy Postbuild Gitlab Hook (fix unreleased) For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS...

  Daniel Beck May 9, 2018
• Using new core APIs with the Beta annotation

  This sort of slid under the radar in the middle of some bigger changes for the JEP-202 reference implementation, so I wanted to call it out now. Arguably this could deserve a retroactive JEP, though I would rather fold it into a JEP for JENKINS-49651 (see below). As of Jenkins 2.118, or plugin parent POM 3.7, you can mark any Java member (class, method, constructor, field,...

  Jesse Glick April 30, 2018
• Security updates for Jenkins core

  We just released security updates to Jenkins, versions 2.116 and 2.107.2, that fix two security vulnerabilities. For an overview of what was fixed, see the security advisory. Subscribe to the jenkinsci-advisories mailing list to receive important notifications related to Jenkins security....

  Daniel Beck April 11, 2018