Changelog for 2.266

Legend:

security fix
major bug fix
bug fix
major enhancement
enhancement

Community feedback:

no major issues
notable issues
required rollback

What's new in 2.266 (2020-11-10)

This release replaces several key components. The Acegi security library used for authentication has been replaced by Spring Security (JEP-227). A fork of the XStream library used to read and write XML files has been replaced by the upstream version of XStream (JEP-228). Refer to the Spring and XStream updates (breaking changes!) blog post for more details.

Fix hidden page elements from radio blocks appearing when they should not. (issue 64040)
Upgrade from Remoting 4.5 to Remoting 4.6 with bugfixes and dependency updates. (pull 5043, Remoting 4.6 changelog)
Make the Maven Configuration of Global Tools compatible with configuration as code plugin. (issue 62446)
Minor English cleanup for resource root URL setting. (issue 41891)
Developer: Jenkins now uses an updated version of the XStream serialization library without custom patches. (pull 4944, JEP-227, Spring and XStream updates (breaking changes!) blog post)
Developer: Jenkins now uses Spring Security rather than its predecessor, Acegi Security. Other bundled Spring libraries are also updated. (pull 4948, JEP-228, Spring and XStream updates (breaking changes!) blog post)
Developer: Upgrade jQuery from 2.1.4 to 3.5.1. (pull 4929, jQuery older release notes (3.1.1, 3.2.1, 3.3.0, 3.3.1, 3.4.0, 3.4.1), jQuery 3.5.0 release notes, jQuery 3.5.1 release notes)
Developer: Remove the deprecated zeroclipboard UI component and the unused dependency on ZeroClipboard. (pull 5042)
Developer: Remove obsolete support for live class reloading with JRebel. (issue 64037)
Internal: Modernize the hashing function of ConsistentHash. (issue 60563)