Changelog

Major enhancement

Require Java 17 or newer. pull 9358, JENKINS-67907 , Java 17 requirement blog post
Upgrade Spring Framework from 5.3.39 to 6.1.14, upgrade Spring Security from 5.8.14 to 6.3.4, and upgrade Java EE from 8 to 9. Users of the LDAP plugin must upgrade to version 733.vd3700c27b_043 in combination with upgrading Jenkins core. Users of the Reverse Proxy Auth plugin must upgrade to version 1.8.0 in combination with upgrading Jenkins core and must also upgrade the Mailer plugin to version 489.vd4b_25144138f. Users of the CAS plugin must upgrade to version 1.7.0 in combination with upgrading Jenkins core. Users of the Windows Negotiate SSO plugin must upgrade to version 136.vda_2b_6a_744b_d8 in combination with upgrading Jenkins core. Users of third-party servlet containers must upgrade their servlet container to an EE 9 version in accordance with the Jenkins Servlet Container Support Policy. Spring Framework 6.0.23 release notes, Spring Framework 6.1.12 release notes, Spring Framework 6.1.13 release notes, Spring Framework 6.1.14 release notes, Spring Security 6.2.6 release notes, Spring Security 6.3.2 release notes, Spring Security 6.3.3 release notes, Spring Security 6.3.4 release notes, Jakarta EE 9 release page, LDAP plugin 733.vd3700c27b_043, Reverse Proxy Auth plugin 1.8.0, Mailer plugin 489.vd4b_25144138f, CAS plugin 1.7.0, Windows Negotiate SSO plugin 136.vda_2b_6a_744b_d8, Servlet Container Support Policy, pull 9672, JENKINS-73278
Upgrade Jetty from 10.0.24 to 12.0.12. pull 9590, JENKINS-73130 , Jetty 12.0.10 release notes, Jetty 12.0.11 release notes, Jetty 12.0.12 release notes
Allow all builds to be removed by the build discarder. JENKINS-68822
Remove Windows path traversal vulnerability escape hatch that was provided with the SECURITY-2481 fix.. pull 9387, JENKINS-73129 , Path traversal vulnerability on Windows - SECURITY-2481

Major bug fix

Fix download of .tar.gz artifacts in Firefox. JENKINS-73381

Enhancement

Enhancements and refinements for the appearance of several pages in Jenkins. pull 9521, pull 9707, pull 9461, pull 9411, pull 9393, pull 9381
Refinements and modernizations to sections of the Jenkins UI. pull 9453, pull 9380, pull 9365, pull 9395, pull 9641
User properties are now categorized in different pages. JENKINS-69869
Update the design of the build history widget. pull 9148
Use Notice component for views lacking jobs. pull 9724
Do not edit unrelated checkboxes in rowSelectionController. JENKINS-73669
Improve display of HTTP handshake errors (such as authentication issues) from the CLI in -webSocket mode. pull 9591
Use webSocket in the inbound agent command line sample. pull 9665
Allow plugins to customize the maximum number of suggestions in autocomplete text fields. pull 9616
Remove obsolete RekeySecretAdminMonitor. JENKINS-73597
Use makeButton to create a jenkins-button on the fly instead of using YUI. JENKINS-73563
Clarify that the plugin incompatibility message applies to the current plugin. JENKINS-73495
Add end of life dates for Alpine 3.20, Ubuntu 24.04, and Fedora 40. Correct several end of life dates, including CentOS 8. pull 9501
Avoid unnecessary download of bundled plugins during the setup wizard. pull 9476
Scroll fields from the added hetero-list entry into the viewport. pull 9488
Modernize the build time trend page with a "time since" column and a link to the console, and allow the table to be resized. Remove the agent column for the Pipeline build trend. pull 9465
When using ExitLifecycle, exit the process immediately upon a boot failure. Also allow custom lifecycles to exit immediately. pull 9483
Display the source URL in logs when installing a plugin. pull 9449
Allow some administrative monitors to be displayed for users with Overall/MANAGE permission. pull 9437
Increase the minimum required Remoting version from 4.13 to 3107.v665000b_51092. pull 9440
Update Stapler from 1880.vb_6d94a_3b_05db_ to 1881.vd39f3ee5c629 and Winstone-Jetty from 6.19 to 6.20 to let Jetty handle HTTP response compression. A new command-line option --compression can be used to disable compression if desired. pull 9379, Stapler 1881.vd39f3ee5c629 release notes, Winstone-Jetty 6.20 release notes
Remove idle executors from the Build Executor widget. pull 9177
The latency for bringing up offline agents can be improved using a new global config option Computer Retention Check Interval and setting an In demand delay of zero on the agents. JENKINS-14789

Bug fix

Several bug fixes for the Jenkins UI. pull 9695, JENKINS-73695 , pull 9667, pull 9654, JENKINS-73330 , pull 9649, pull 9625, pull 9658, JENKINS-73302
Restore compatibility with plugins contributing new objects with context menus, such as the Nested Views plugin. JENKINS-73785
Make deserialization of Map fields in XML files more robust. JENKINS-73687
Restore compatibility with the OpenId Connect Authentication and Reverse Proxy Authentication plugins. pull 9696
Validate display name only against items in the same ItemGroup. JENKINS-72988
Correct the styling for plugins that can't be disabled in plugin manager when user has system read permission. pull 9463
Refresh the build history widget in all cases, including on background tabs or hidden tabs. JENKINS-73613
Fix IndexOutOfBoundsException in cloud management pages when the controller has no executors. pull 9519, JENKINS-73554
Fix the hudson.slaves.SlaveComputer.allowUnsupportedRemotingVersions escape hatch, which was previously not working with inbound agents. JENKINS-73467

Changelog for 2.479.1