LTS Changelog

Upgrade Guide

2.580.2

October 28, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Security
Enhancement
  • Update dependency handlebars to v4.7.10. #27510
  • Avoid security scanner complaints by integrating the most recent release of the ASM byte code manipulation library. #27507
  • Use Jetty 12.1.14 from Winstone and Stapler updates. #27506
Bug fix
  • Adapt OS EOL test for Ubuntu 22.04. #27464
  • Keep ANSI colours in the live console of freestyle builds after a pause in output. #27424

2.580.1

September 30, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Changes since 2.580
Bug fix
  • Include Apache Commons Lang 2.6 for compatibility. #27359
Enhancement
Notable changes since 2.568.3
Major enhancement
  • Refresh the status icons to show the status of the current job, without including status of previous job. #23904
Enhancement
  • Stop bundling the bouncycastle API, Command Agent Launcher, Oracle Java SE Development Kit Installer, JAXB, Trilead API, SSH server, JavaBeans Activation Framework (JAF) API, JavaMail API, and Instance Identity plugins, reducing the size of jenkins.war by more than 20 MB. Jenkins no longer installs these plugins automatically when upgrading from Jenkins 2.356 or earlier, or when a plugin built against such an old version is discovered. If you are affected, install these plugins through the plugin manager. bouncycastle API Plugin, Command Agent Launcher Plugin, Oracle Java SE Development Kit Installer Plugin, JAXB Plugin, Trilead API Plugin, SSH server Plugin, JavaBeans Activation Framework (JAF) API Plugin, JavaMail API Plugin, Instance Identity Plugin, #27129
  • Stop bundling the JUnit, Mailer, Matrix Authorization Strategy, Matrix Project, and OWASP Markup Formatter plugins, reducing the size of jenkins.war by more than 20 MB. Jenkins no longer installs these plugins automatically when upgrading from Jenkins 1.577 or earlier, or when a plugin built against such an old version is discovered. If you are affected, install these plugins through the plugin manager. JUnit Plugin, Mailer Plugin, Matrix Authorization Strategy Plugin, Matrix Project Plugin, OWASP Markup Formatter Plugin, JUnit Plugin, #27098
  • Reduce size of Jenkins war by removing unused CLI dependency. #27099
  • Reduce size of Jenkins war by removing comments from translation files. #27100
  • Standardise Jenkins branding during Sign in, Registration, and About Jenkins #27046
  • Refine Notifications component. #27005
  • Refine the 'System Log' Manage Jenkins page #26614
  • Standardise command palette, dialog, dropdown, and tooltip materials #26900
  • Accept ECDSA and Ed25519 private keys for access to the Jenkins command line interface. #26954
  • Add password complexity rules and extension point for configurable password validation. issue 18323, #26774
  • Allow administrators to configure the remember-me ("Keep me signed in") cookie validity with the hudson.security.TokenBasedRememberMeServices2.tokenValidity system property. The validity period is limited to 1 year. #26833
  • Prohibit the deserialization of Object fields by default. Learn more, issue 26914, #26915
  • Check that the deserialized elements in additional collections are of the expected type. #26918
Bug fix
  • Render Plugin Manager entries without wiki URLs as plain text (regression in 2.370). #26976
  • Fix tailing of logs when partial lines are emitted (regression in 2.534). #26871
  • Fix missing shadow and blur on the global search results dropdown. #27113
  • Fix breadcrumb overflow menu items not rendering. #26978
  • Restore the Cancel button on the Console Output page of running builds so users can abort a build without leaving the log view. #26637
  • Show only accessible links in sidepanel for new manage Jenkins UI. #27228
  • Fix the combobox suggestion list flashing and closing immediately when the field is clicked. #26922
  • Center the chevron in the list of builds on the Build History view. #26522
  • Do not show "Agent is connected" message when node is marked temporarily offline #26675

2.568.3

September 2, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Security
Enhancement
  • Update Winstone to version 8.1047.x with Eclipse Jetty 12.1.12. #27193

2.568.2

August 5, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Security
Bug fix
  • Avoid null pointer exception showing the upstream cause of a job that was triggered by the build step in a pipeline prior to a Jenkins restart (regression in 2.558). issue 26633, #27094
  • Fix weird animation artifact when clicking "Apply". issue 16570, #27002
  • Fix build history tooltip being clipped by overflow hidden. issue 27000, #26554

2.568.1

July 8, 2026
Windows 2019 controller images have been dropped from this release. For users who must use Windows for their controller and are stuck on Windows 2019, the workaround is either to:
  1. Install Jenkins controller via the MSI available via the "Windows" links on https://www.jenkins.io/download/
  2. Build their own image
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Changes since 2.568
Enhancement
Bug fix
  • Re-enable the "Add" button immediately when an item is deleted from a full list (regression in 2.536). #26937
  • Fix blue tinted scrollbar. #26893
  • Fix the combobox suggestion list flashing and closing immediately when the field is clicked. #26884
Notable changes since 2.555.3
Enhancement
  • Use a dialog to add and edit the description of jobs, builds, views, computers, and more. #26535
  • Refine appearance of dialogs. #26514
  • Refine the 'System' page of Manage Jenkins. #26679
  • Refine the 'Users' page of Manage Jenkins. #26475
  • Refine how administrative monitors are displayed. #26417
  • Deduplicate build causes in queue tooltip and build overview. #26392
  • Reduce agent creation time during high usage. issue 26796, #26797
  • Improve queue maintenance performance for jobs with large build histories. #26597
  • Add Windows Server 2025 container image for the Jenkins controller. pull 2369
Bug fix
  • Ensure cancel button for queued jobs doesn't move when other badges are present. #26564
  • Remove lines from log recorder page. #26598
  • Wrap long, unbroken strings correctly within the maximum width of the dialog. #26574
  • Restore the job name in the page title on the build console and changes pages. #26727
  • Ensure urls in widgets loaded via ajax are correct. #26721

2.555.3

June 10, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Security
Bug fix
  • Prevent active builds from being lost when a job is reloaded (regression in 2.523). #26700
  • Limit the SECURITY-3657 security fix by default to the controller JVM due to reported problems extracting some stashes involving symbolic links on agents. #26709
  • Ensure applying configuration as code retains the offline cause of agent (regression in 2.482). #26749
  • Fix race condition in plugin manager search results. #26819
  • Update dependency lodash to v4.18.1. #26578

2.555.2

May 13, 2026
The Jenkins MSI installer is now signed by "LF Open Source, LLC" using the Microsoft Artifact Signing Service. The change causes the Edge browser on Windows to report that the file is not commonly downloaded. Users need to select "Keep anyway" to download the installer.
When running the Jenkins MSI installer with the new signature, Windows SmartScreen may report "Microsoft Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.". Users need to select "More info" to advance to the next screen and then select "Run anyway". A blog post provides screenshots and more details.
The Microsoft support forum says that Microsoft SmartScreen will stop prompting users once there are enough installations to increase its reputation score.
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Bug fix

2.555.1

April 15, 2026
Java 21 or Java 25 are required to run Jenkins 2.555.1. Java 17 is not supported with Jenkins 2.555.1 and later. More information is available in the Java support policy and the 2 + 2 + 2 Java support plan blog post
Tested Configurations: Platforms: Linux, Windows
JDKs: 21, 25
Changes since 2.555
Enhancement
Bug fix
  • Fix multibranch Pipeline scan from parent folder (regression in 2.547). issue 26516
Notable changes since 2.541.3
Major enhancement
Enhancement
  • Enables the Overall/Manage permission by default. This permission when granted to users allows them to configure certain parts of Jenkins' global configuration without the ability to execute arbitrary code. #23873
  • API tokens with expiration date. #23859
  • Allow entirely disabling CSP headers to work around unusual Jenkins configurations resulting in excessive HTTP response header lengths. #23915
  • No longer include the client IP address in CSRF protection token ("crumb") calculation. Effectively, the behavior is the same as if the (now removed) "Enable proxy compatibility" option were always checked. #25918
  • Show a warning to administrators who set the hudson.security.csrf.DefaultCrumbIssuer.EXCLUDE_SESSION_ID flag, informing them of the further reduced safety, and the option's planned future removal. #25918
  • Bump the minimum supported remoting.jar version to 3176.v207ec082a_8c0. #26034
  • Revamp Clouds page. #26315
Bug fix
  • Fix sidebar navigation for non-ASCII localized section headers. #26068
  • Fix a 404 error when clicking plugin names on the “License and dependency information for plugins” page. #26029
  • Fix primary button text color in administrative monitors. #26212
  • Fix progressive rendering progress calculation. #26235
  • Redirect to the correct URL when creating log recorders with non-ASCII names. JENKINS-26318
  • Do not fail builds when the tool installation directory is readonly. JENKINS-16005

2.541.3

March 18, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21, 25
Security
Enhancement
  • Clarify UI label when configuring Content Security Policy. issue 26197
Bug fix
  • Do not compute the CSP header if it's completely disabled using the Java system property jenkins.security.csp.CspHeader.headerName in case computation takes too long. issue 26254
  • Fix exception message being logged in rare cases on views with keyboard shortcut indicators. issue 26213
  • Make redirects to documentation on www.jenkins.io work in the builtin administrative monitors when using Chrome and enforcing Content Security Policy. issue 26001

2.541.2

February 18, 2026
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21, 25
Security
Major bug fix
  • Submitting a form would in rare cases, lead to an error (Got type array but no lister class found for type...) JENKINS-76249
Bug fix
  • Fix temporary offline state of computer is lost on config submit issue 26146

2.541.1

January 21, 2026
A new GPG signing key (5E386EADB55F01504CAE8BCF7198F4B714ABFC68) is used for the Jenkins long term support RPM and DEB package repositories. Administrators need to install and accept the new signing key when upgrading. The new Linux repository signing keys blog post has more details.
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21, 25
Changes since 2.541
Enhancement
  • Add telemetry for Java properties. #26038
  • Update Winstone to version 8.1026.v31def012a_f48 to increase the default maximum HTTP response header size to 32KB to account for very complex Content Security Policy headers. #25901
  • Allow entirely disabling CSP headers to work around unusual Jenkins configurations resulting in excessive HTTP response header lengths. #23915
  • Add telemetry for Content Security Policy enforcement. #23901
  • Add Windows Server 2022 for Windows controller and agent containers. pull 2209 (Docker), pull 441 (Docker agents)
  • Add Java 25 container images for the Jenkins controller and agents. pull 2146 (Docker), pull 549 (Docker SSH agent), pull 1061 (Docker agents)
Bug fix
  • Use rootURL in Cloud sidepanel so links in actions work properly. #26004
  • Fix console log copy button for freestyle projects that have finished (regression in 2.493). #25953
  • Allow large forms to be submitted (regression in 2.531). #25968
Notable changes since 2.528.3
Major enhancement
Enhancement
  • Move the user time zone configuration to the user preferences page. #11065
  • Remove duplicate built-in executor configuration from System configuration page. It now configures it on the built-in executor under Nodes instead. #11224
  • Add ability to set default value for experimental flags via system property. JENKINS-76260
  • Redesign the reorderable list component. #10186
  • Log a thread dump when a /health check exceeds the 10 second default timeout to help diagnose stuck requests. This timeout is configurable via the jenkins.health.HealthCheckAction.thresholdTimeout system property. #11266
  • Use the same styling for title bar mouseover effect. JENKINS-75990
  • Add rest API to create an agent from XML. #11229
  • Add experimental pages for Manage Jenkins, jobs, builds, dashboard, run details, and parameter details. #11194, #11208, #11222, #11116, #11127, #11128
Bug fix
  • Eliminate spurious CPU utilization in browser when idle. #11257
  • Fix toggle collapse in Chrome to prevent 404 errors. JENKINS-76118
  • Fix MyViewsProperty condition. #11252
  • Set the default enter delay for tooltips to 250ms. JENKINS-75892
  • Restore file fingerprint and project relationship actions to views. JENKINS-76275
  • Fix API token rendering. #11321

2.528.3

December 10, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Security
Bug fix
  • Restore Check File Fingerprint and Project Relationship actions to views. #11275

2.528.2

November 12, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Enhancement

2.528.1

October 15, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Changes since 2.528
Bug fix
  • Remove Eclipse modifier class to ensure code compiles as expected. JENKINS-76135
  • Fix All/None/Suggested buttons visibility in plugin setup wizard. JENKINS-76114
  • Fix number comparison in min/max form validator. JENKINS-76002
Notable changes since 2.516.3
Major enhancement
  • Update Debian container images to Debian 13 (Trixie). pull 2063 (Docker)
  • Updates to various UI elements. Refine the header, app bar, and side panel. Refine colors, borders, and buttons. Use secondary text color for dropdowns. #10814, #10806, #10853, #10901, #10913
  • Breadcrumbs now have a visual indicator and are compatible with accessibility guidelines. JENKINS-75851
Enhancement
  • Improve performance with additional caching of Java classes. #10979
  • Apply the current theme color palette to shutdown and safe-restart messages. #10945
  • Remove the /extensionList/ HTTP endpoint and related telemetry. Users of the Timestamper plugin should update to version 1.29 or newer. #10752
  • Use a new name format for subdirectories of $JENKINS_HOME/users/. Stop creating redundant $JENKINS_HOME/users/users.xml. #10926
  • Minor performance optimization for administrative monitors badge display. #10855
  • Refine User page UI. #10807
  • Refine the Console URL Provider UI. #10839
  • Show parameters of a run in read-only mode. #10941
  • Reduce agent launch log stack trace noise for ClosedChannelExceptions. #10927
  • SSH cli now uses EdDSA natively provided by Apache Mina via Bouncycastle. #10788
  • Add Polish localization. Adjust Bulgarian localization spacing. Add German localization for Global Build Discarder. #11025, #10835, #10943
Bug fix
  • Fix a race condition in WebSocket agent connection initialization. #11039
  • Create friendlier HTTP response for an attempt to buildWithParameters a disabled or nonparameterized job. #10954
  • Fix incorrect parameter name in quietDown API online help. JENKINS-75991
  • Correct word-wrap and word-break CSS properties to use supported values. #10881
  • Stop printing an incorrect log message when retrieving agent labels. #10863
  • Enable the chevron button in job tables by removing pointerevents:none from its CSS styling. JENKINS-75252
  • Avoid queue items being lost if the node disconnects at a bad time during allocation. #10756

2.516.3

September 17, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Security
Major bug fix
  • Remove link styling in a menu when the corresponding menu is closed. JENKINS-75927
  • Fix a memory leak in Java class loading for the GStringTemplateEngine class. JENKINS-75879
Enhancement
Bug fix
  • Position the Save and Apply buttons for views under the header instead of over it. JENKINS-75937

2.516.2

August 20, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Bug fix

2.516.1

July 23, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Changes since 2.516
Bug fix
  • Improve UI of secondary actions in the header. JENKINS-75853
  • Add window listener computeOverflow to trigger a new compute of the breadcrumbs. JENKINS-75818
  • Prevent multiple dropdowns appearing in breadcrumbs. JENKINS-75834
  • Display a badge in the hamburger for Actions with active alerts. JENKINS-75832
  • Make script console layout configurable. JENKINS-75849
Notable changes since 2.504.3
Major enhancement
  • Redesign the header and navigation. #10245
  • Display plugin health score in the Plugin Manager. JENKINS-75350
Enhancement
  • Updates to various UI elements. Refine the appearance of dialogs and Command Palette. Standardize Manage Jenkins page size. Use Jenkins color palette for test results and CodeMirror. #10479, #10514, #10687, #10721
  • Refresh user API Token UI. #10484
  • Remove support for loading user data from releases older than Jenkins 1.283. JENKINS-75370
  • Remove support for loading proxy configuration from releases older than Jenkins 1.415. JENKINS-75370
  • Add "No plugins" notice to Appearance configuration page. #10478
  • Update to a dropdown menu display for the user Default View. #10482
  • Improve UI of Secret and Password entry. #10489
  • A new /health endpoint is available to determine whether Jenkins is healthy. JENKINS-75530
  • New jobs no longer create an empty legacyIds marker file in the builds directory. Existing legacyIds files are deleted upon upgrade to reduce inode usage. JENKINS-75465
  • Jenkins' own user database no longer accepts new passwords longer than supported by bcrypt (72 bytes). Users with longer passwords are advised to change their password. JENKINS-75533
  • Remove jbcrypt library. If you use the Active Directory plugin, you must update it to version 2.40 at the same time Jenkins is updated to 2.516.1. JENKINS-75533
  • Remove deprecated hudson.util.IOException2. #10628
  • Remove support for ?path and ?pattern query parameters for directory listings of user content, such as workspaces and archived artifacts. The filter text box now uses JavaScript instead of a form submission to navigate to the expected URL. Programmatic users are advised to replace ?path or ?pattern in their requests with the resulting redirect URL, whose behavior did not change from before. JENKINS-75388
  • Remove PAM Authentication plugin from suggested plugins. #10663
  • Add Powershell script to Windows installer to update registry information after WAR update. Packaging PR 494
  • Add a "copy to clipboard" button to the Jenkins error page. #10712
  • Complete the Japanese translation for the keepDependencies help file. #10366
  • When running in Jetty (when using the default java -jar jenkins.war), set the SameSite attribute for cookies to provide additional protection from some CSRF vulnerabilities. By default this sets the attribute to Lax. This can be changed by setting the Java system property jenkins.security.JettySameSiteCookieSetup.sameSiteDefault. Users of Microsoft Entra ID (previously Azure AD) Plugin are advised to update the plugin to version 580.v2f665882b_a_71 or newer at the same time. #10630, Jenkins features controlled by system properties
  • Allow the Views tab bar to be configured per user. #10379
Bug fix
  • Only update affected computers when adding/updating/removing nodes instead of reviewing every computer and checking their retention strategy, which can cause performance issues at scale. JENKINS-33704
  • Fix limitation of Summary widget on the build page. #10368
  • Fix search result URLs when using the old search implementation. JENKINS-75320
  • Add value attribute to button element in submit.jelly. JENKINS-75441
  • Ensure computer configuration is updated correctly after updating a node. JENKINS-33704
  • Ensure number of executors of the built-in node is synced with the number of executors defined in Jenkins after a configuration reload. #10529
  • Allow icons in tables to be updated even when there is more than one table displayed on the page. #10230
  • Fix "No builds" state remaining in Build History widget after first build. JENKINS-75574
  • Fix state of labels removed from nodes. JENKINS-68155
  • When completing a build, look for older builds to rotate asynchronously, in case this process is expensive. #10555
  • Fix the display of icons in the header by only applying the jenkinsavatar class to user icons, not the other header icons. JENKINS-75615
  • Reduce heap usage of various HTTP endpoints serving large build logs. JENKINS-75081
  • Restore the children context menu for breadcrumbs. JENKINS-75634
  • Remove overlapping text from the Thread Dump page. JENKINS-75621
  • Defer rendering a build's artifact list to a background request to avoid expensive computations. #10623
  • Catch ConnectionRefusalException when thrown by a websocket agent connection attempt. #10655
  • Do not close the dropdown menu when hovering over the submenu of the dropdown menu. JENKINS-75635
  • Fix URLs in search result list when running at `root` context. #10725
  • Restore side panel actions for views. JENKINS-75683
  • Replace Loading overlay with skeleton outline on Manage Jenkins pages. JENKINS-68934
  • Place secondary actions in the collapsing menu instead of displaying them based on screen width. JENKINS-75727
  • Any RootAction that used custom rendering (action.jelly) is once again visible in the header and behaves appropriately. Any RootAction that uses jelly to show/hide is correctly hidden in the header. Any RootAction with sub tasks now shows the subtasks as a dropdown when in the correct context. JENKINS-75683

2.504.3

June 25, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Enhancement

2.504.2

May 28, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Enhancement
  • Add telemetry to determine whether a specific URL (/extensionList/) is in use by plugins or can safely be removed in future releases of Jenkins. #10423, #10505

2.504.1

April 30, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Changes since 2.504
Major bug fix
  • Only update affected computers when adding/updating/removing nodes instead of reviewing every computer and checking their retention strategy, which can cause performance issues at scale. Ensure number of executors of the built-in node is synced with the number of executors defined in Jenkins after a configuration reload. Ensure computer configuration is updated correctly after updating a node. #10494, #10529, #10538, JENKINS-33704
Enhancement
Notable changes since 2.492.3
Major enhancement
  • Remove the Yahoo! User Interface library. JENKINS-75100
  • Add experimental Details widget for builds. #10147
Enhancement
  • Disable the copy button in insecure contexts. JENKINS-74832
  • Update the Copy button animation. #10139
  • Remove Commons Discovery from the Jenkins WAR. #10122
  • Add the option to display the Console Output on the build page behind an experimental flag. #10115
  • Wrap app bars on smaller screens. #10119
  • Remove the ability to install as a Windows service from a running Jenkins install. Users wanting this functionality should instead download and install the MSI package. #8523
  • Refresh the interface of Jenkins CLI page. #10143
  • Define Jenkins UI colors in a more perceptually uniform way using OKLCH. #10078
  • Improve the appearance of user avatars in Jenkins. Custom avatars are also available through the Avatar plugin. #10180
  • Improve accessibility and clean up various components. #10198
  • Allow the master key to be stored in a separate location. JENKINS-58743
  • Add space between the Add/Edit description button and Views bar. #10386
  • Add grouping to Command Palette search results. #10252
  • Add empty state to the Manage Old Data page. #10320
  • Add Cancel button to the Edit description form. #10364
  • Update interrupted build action summary icon. #10365
Bug fix
  • Use the correct date in the History widget when a user has configured a dedicated time zone. JENKINS-75163
  • Form validation for cron schedules included seconds based on the current time, when in fact the trigger fires at minute-granularity slots. #10239
  • Fix occasional failures to write files to Jenkins home directory on Windows servers due to virus scanners. JENKINS-75255
  • Fix task notification for the rebuild plugin and others. JENKINS-75265
  • Fix tooltip and console link in the progress bar of jobs in the executors widget. JENKINS-75259
  • Clarify the displayed message while the build history widget initializes. JENKINS-75321
  • Fix border radius overlap when multiple lines of view names are displayed. JENKINS-75273
  • Sort deprecated plugins alphabetically. JENKINS-75341
  • Prevent dynamic plugin installation from registering the same extension twice in some cases. JENKINS-75232
  • Fix Manage Jenkins nested context menu to stay open when parent menu closes. JENKINS-72745
  • Fix enableTopButton to insert entry at the top in an f:repeatable. JENKINS-75464
  • Prevent Java null pointer exception when adapting a keyboard shortcut based on the User-Agent header. #10413

2.492.3

April 2, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Security
Bug fix

2.492.2

March 5, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Security
Bug fix
  • Use correct date in the History widget when a user has configured a dedicated time zone. JENKINS-75163
  • Fix notification for `l:task` (regression in 2.481). JENKINS-75265
  • Fix tooltip and console link in progress bar of jobs in the executors widget (regression in 2.480). JENKINS-75259
  • Fix occasional failures to write files to the Jenkins home directory on Windows servers due to virus scanners (regression in 2.491). JENKINS-75255

2.492.1

February 5, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Changes since 2.492
Enhancement
  • Disable the JnlpSlaveRestarterInstallerTest on ci.jenkins Windows agents. #10196
Notable changes since 2.479.3
Major enhancement
  • Disable the Yahoo! User Interface library by default. JENKINS-73539
  • Add Command Palette as a replacement for the search bar. #7569
  • Refine and modernize the appearance of several pages. #9734, #9735, #9833
Enhancement
  • Add icons to Command Palette. #10049
  • Add Turkish translations for node list and RSS links. #9928, #9916
  • Modernize ComboBox component. #9462
  • Show a notification when scheduling a build fails. JENKINS-73813
  • Clearer error message for the CLI in the default webSocket mode when a 403 error results from a reverse proxy misconfiguration. #9930
  • The agents online/offline status and icon can now be influenced by the offline cause, giving better information to users. Clarifies some use cases when an agent was offline by design and not because of a configuration or technical error. #9883
  • Retain user-generated offline reason when agent connects or disconnects for technical reasons. #9855, JENKINS-30101, JENKINS-30175
  • Allow all immutable List subclasses from Java 11 over remoting. #10026
  • Avoid printing the same stack trace multiple times when file persistence fails. Temporary file names used by the AtomicFileWriter are now derived from the target file name. #10058
  • Added password validation to ensure that existing users cannot create a password of less than 14 characters in length when in FIPS mode. JENKINS-74858
  • Stop allowing configuration of the agent protocols list. #9903
  • Upgrade Winstone to 8.2 in order to update Jetty from 12.0.13 to 12.0.14. #9841, Jetty 12.0.14 changelog, Winstone 8.2 changelog
Bug fix
  • Use refined build status icons in multibranch projects. JENKINS-74868
  • Form validation that depends on radio buttons now finds the selected one and not the previous one. #10081
  • Since 2.489, JavaScript errors could be seen in some Jenkins pages, such as the setup wizard, omitting the usual header bar. #10089
  • Fix scrolling with keyboard. #10054
  • Reduce spacing in help files. JENKINS-69549
  • Remove trailing space from Windows agent secret file instructions. JENKINS-72979
  • Revert update of hotkeys-js dependency introduced in 2.490. The hotkeys-js bump caused a regression with Jenkins plugin BOM tests. #10070
  • Restore the original behavior of FileBoolean(Class, String). #10022
  • Fix a rare race condition rendering pages soon after startup. #9925
  • Fix end of life operating system monitor that shows 2099-12-31 on the first day a warning should be displayed. JENKINS-73845
  • Ignore values with incorrect types when deserializing collections and maps in XML files. JENKINS-63343

2.479.3

January 8, 2025
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Enhancement
Bug fix
  • Remove Upgrade Automatically from users with `SystemRead` permissions. JENKINS-73908
  • Fix double-zipped .tgz files so they are no longer mismatched. JENKINS-73942
  • Allow non-HTTP(S) URLs in zip-based tool installer configuration. JENKINS-75003
  • Fix exception error message about hudson.model.UpdateSite$Warning on Manage Jenkins that may be shown when plugins with known security issues are installed. JENKINS-73487
  • Fix double-escaped tooltips in "Help for feature" (regression in 2.380). JENKINS-73907

2.479.2

November 27, 2024
Tested Configurations: Platforms: Linux, Windows
JDKs: 17, 21
Security
Enhancement
Bug fix
  • Upgrade XStream to 1.4.21. XStream 1.4.21 includes a fix for CVE-2024-47072. JENKINS-74826
  • Do not add jobs created via the REST API to the default view (regression in 2.475). JENKINS-74795
  • Allow context classloaders to be defined without making explicit reference to the calling class. JENKINS-74814
The changelog of historical releases can be found in the LTS changelog archive.