AvatarContributor#extractDomainFromUrl.
pull 23865
X-Jenkins-ValidateButton-Callback (a JSON object with callback and arguments keys) as a replacement for the CSP incompatible script HTTP response header for f:validateButton.
pull 20345
*srcelemor *srcattr directives in CSP Plugin 2.x.
pull 23855
Content-Security-Policy protection for the Jenkins UI.
Introduce an API for plugins to relax (or further tighten) the rules around various resources.
If you have the Content Security Policy Plugin (csp) installed, update it to version 2.x.
admin documentation, plugin compatibility, developer documentation, JENKINS-76263
autorefresh feature of the zypper repository is disabled and requires a zypper refresh command.
/health check exceeds the 10 second default timeout to help diagnose stuck requests.
This timeout is configurable via the jenkins.health.HealthCheckAction.thresholdTimeout system property.
pull 11266
display:flex addition from the default panel-header CSS.
pull 11272
NoSuchFileException in FilePath#unzip.
JENKINS-76192
items.yaml now loads after the SYSTEM_CONFIG_ADAPTED milestone is completed.
pull 11234
MyViewsProperty condition.
pull 11252
Extension.optional attribute.
pull 11201
required input validator to reject strings that are only whitespace.
pull 11143
FormFieldValidator.NonNegativeInteger.
pull 11176
Parameters dialog for builds.
pull 11116
configureclouds redirect to clouds.
pull 10982
UberClassLoader class caching.
pull 10979
NavigableMap interface from the CopyOnWrite.Tree map.
Optimise the AbstractLazyLoadRunMap.search() method.
JENKINS-76028
BuildReferenceMapAdapter to improve code re-usage.
JENKINS-75986
$JENKINS_HOME/users/.
Stop creating redundant $JENKINS_HOME/users/users.xml.
pull 10926
ClassLoader memory consumption.
JENKINS-75675
buildWithParameters a disabled or nonparameterized job.
pull 10954
quietDown API online help.
JENKINS-75991
GStringTemplateEngine class.
JENKINS-75879
ClosedChannelExceptions.
pull 10927
getName, getFullName, and getFullDisplayName can now be referred through dedicated interfaces.
pull 10827
word-wrap and word-break CSS properties to use supported values.
pull 10881
Slave.warnPlugin.
pull 10863
/extensionList/ HTTP endpoint and related telemetry.
Users of the Timestamper plugin should update to version 1.29 or newer.
pull 10752
Global Build Discarder.
pull 10835
pointerevents:none from its CSS styling.
JENKINS-75252
computeOverflow to trigger a new compute of the breadcrumbs
JENKINS-75818
RootAction that used custom rendering (action.jelly) is once again visible in the header and behaves appropriately.
Any RootAction that uses jelly to show/hide is correctly hidden in the header.
Any RootAction with sub tasks now shows the subtasks as a dropdown when in the correct context.
JENKINS-75683
Execute shell, parameter descriptions, and other CodeMirror components after skeleton loading.
JENKINS-75794
30s, 3m, 1h, 2d, etc.
pull 10561
Loading overlay with skeleton outline on Manage Jenkins pages.
JENKINS-68934
keepDependencies help file.
pull 10366
java -jar jenkins.war, the default), set the SameSite attribute for cookies to provide additional protection from some CSRF vulnerabilities.
By default this sets the attribute to Lax.
This can be changed by setting the Java system property jenkins.security.JettySameSiteCookieSetup.sameSiteDefault.
Users of Microsoft Entra ID (previously Azure AD) Plugin are advised to update the plugin to version 580.v2f665882b_a_71 or newer at the same time.
pull 10630, Jenkins features controlled by system properties
?path and ?pattern query parameters for directory listings of user content, such as workspaces, archived artifacts and others.
The filter text box now uses JavaScript instead of a form submission to navigate to the expected URL.
Programmatic users are advised to replace ?path or ?pattern in their requests with the resulting redirect URL, whose behavior did not change from before.
JENKINS-75388