diff --git a/content/_data/changelogs/lts.yml b/content/_data/changelogs/lts.yml
index 2d8bd0a33501..a3bef5fa9062 100644
--- a/content/_data/changelogs/lts.yml
+++ b/content/_data/changelogs/lts.yml
@@ -9733,6 +9733,494 @@
message: |-
Restore context menus of model links in build history views and administrative monitors (regression in 2.402).
+- version: "2.426.1"
+ date: 2023-11-15
+ banner: >
+ Short container image tags (without "jdk" in them) such as jenkins/jenkins:2.426.1
are now using Java 17.
+ If you need to continue using Java 11, use tags like jenkins/jenkins:2.426.1-jdk11
.
+ lts_predecessor: "2.414.3"
+ lts_baseline: "2.426"
+ changes: # compared to lts_baseline 2.426 - extracted from the RC commit(s)
+
+ - type: major bug
+ category: bug
+ pull: 8422
+ authors:
+ - daniel-beck
+ pr_title: "[JENKINS-71252][JENKINS-70793] Multiple form validation fixes"
+ references:
+ - issue: 71252
+ - issue: 70793
+ message: |-
+ Show form validation results for form elements that are initially hidden.
+ Remove previous form validation errors when the form validation is updated with new content (regression in 2.355).
+ - type: major bug
+ category: bug
+ issue: 72170
+ pull: 8602
+ authors:
+ - mawinter69
+ pr_title: "[JENKINS-72170] fix nested hetero-list entries with mixture of inputs and buttons"
+ message: |-
+ Fix multibranch Pipeline Add source and other uses that mix inputs and buttons (regression in 2.422).
+ - type: major bug
+ category: bug
+ issue: 72163
+ authors:
+ - basil
+ pr_title: "[JENKINS-72163] Retry on initial connection failure occurs in one entrypoint but not the other"
+ references:
+ - url: https://github.com/jenkinsci/remoting/pull/675
+ title: Remoting PR 675
+ message: |-
+ Add sleep
call when -noReconnect
is not specified for Kubernetes agents.
+ - type: major bug
+ category: bug
+ issue: 65368
+ authors:
+ - sunweisheng
+ pr_title: "Remoting agent.jar does not work behind proxy"
+ message: |-
+ Add proxy support for Remoting.
+ - type: major bug
+ category: regression
+ pull: 8564
+ issue: 71937
+ authors:
+ - Vlatombe
+ pr_title: "[JENKINS-71937] Fix deprecated 'Slave' constructor"
+ message: |-
+ Fix agent allocation due to label issue detected by vSphere Cloud plugin (regression in 2.421).
+ - type: major bug
+ category: regression
+ pull: 8613
+ issue: 72189
+ authors:
+ - mawinter69
+ pr_title: "[JENKINS-72189] fix drag&drop handle for existing repeatables"
+ message: |-
+ Fix drag and drop handle for existing repeatables (regression in 2.335).
+ - type: rfe
+ category: rfe
+ pull: 8564
+ issue: 72248
+ authors:
+ - daniel-beck
+ pr_title: "Add telemetry for Jenkins uptime"
+ message: |-
+ Add telemetry for Jenkins uptime.
+ - type: rfe
+ category: rfe
+ pull: 8587
+ issue: 72156
+ authors:
+ - olamy
+ pr_title: "[JENKINS-72156] Backport Upgrade to Winstone 6.14 which contains an upgrade to Jetty 10.0.17"
+ references:
+ - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.13
+ title: Winstone 6.13 changelog
+ - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.14
+ title: Winstone 6.14 changelog
+ - url: https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16
+ title: Jetty 10.0.16 changelog
+ - url: https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.17
+ title: Jetty 10.0.17 changelog
+ - url: https://nvd.nist.gov/vuln/detail/CVE-2023-44487
+ title: CVE-2023-44487
+ message: |-
+ Upgrade Winstone from 6.12 to 6.14.
+ This includes the upgrade of Jetty from 10.0.15 to 10.0.17.
+ The Jetty upgrade includes fixes for several CVEs.
+ - type: bug
+ category: regression
+ pull: 8606
+ issue: 72179
+ authors:
+ - daniel-beck
+ pr_title: "[JENKINS-72179] Show description of boolean build parameter values"
+ message: |-
+ Show the description of boolean build parameter values on the Parameters view (regression in 2.179).
+ - type: bug
+ category: regression
+ pull: 8492
+ issue: 72020
+ authors:
+ - Vlatombe
+ pr_title: "[JENKINS-72020] Restore ability to reorder clouds"
+ message: |-
+ Allow clouds to be reordered.
+ This was previously possible, but disappeared when the cloud management was moved to a separate page (regression in 2.403).
+ - type: bug
+ category: regression
+ pull: 8674
+ issue: 70994
+ authors:
+ - basil
+ pr_title: "[JENKINS-70994] Upgrade bundled SnakeYAML plugin from 1.33-95.va_b_a_e3e47b_fa_4 to 2.2-111.vc6598e30cc65"
+ message: |-
+ Update SnakeYAML plugin to 2.2 to silence security scanners.
+
+ lts_changes: # compared to lts_predecessor 2.414.3 (selected by personal review)
+
+ - type: security
+ authors:
+ - Kevin-CB
+ - dwnusbaum
+ message: |-
+ Important security fixes.
+ references:
+ - url: /security/advisory/2023-09-20/
+ title: 2023-09-20 security advisory
+ - url: /security/advisory/2023-07-26/
+ title: 2023-07-26 security advisory
+ - type: major rfe
+ category: major rfe
+ pull: 7781
+ authors:
+ - timja
+ - basil
+ pr_title: "[JENKINS-70906] Remove prototype from core"
+ references:
+ - issue: 70906
+ - pull: 7781
+ - url: https://www.jenkins.io/blog/2023/05/12/removing-prototype-from-jenkins/
+ title: Prototype removal blog post
+ message: |-
+ Remove outdated Prototype.js library.
+ - type: major rfe
+ category: major rfe
+ authors:
+ - MarkEWaite
+ pr_title: "Remove CentOS 7 container images"
+ references:
+ - url: "/blog/2023/05/30/operating-system-end-of-life/"
+ title: Red Hat Enterprise Linux 7 and CentOS 7 end of life blog post
+ - url: https://github.com/jenkinsci/docker/pull/1777
+ title: Docker pull request 1777
+ message: |-
+ Stop delivering CentOS 7 container images as part of the end of support for Red Hat Enterprise Linux 7 and its derivatives.
+ - type: major rfe
+ category: rfe
+ pull: 7938
+ issue: 71438
+ authors:
+ - mawinter69
+ pr_title: "[JENKINS-71438] Replace browser confirm with modal dialogs"
+ message: |-
+ Replace browser confirm with modal dialogs in many places.
+ Add API for alert, confirm, prompt, modal and form dialogs.
+ - type: major rfe
+ category: rfe
+ pull: 8418
+ authors:
+ - mawinter69
+ - janfaracik
+ - NotMyFault
+ pr_title: "Replace hetero-list YUI button and menu with new style button and tippy.js menu"
+ references:
+ - pull: 8381
+ - pull: 8376
+ - pull: 8375
+ - pull: 8363
+ - pull: 8180
+ message: |-
+ Updates to various UI elements.
+ Modernize buttons, menus, link design, and content blocks.
+ - type: major rfe
+ category: rfe
+ pull: 8403
+ authors:
+ - timja
+ pr_title: "Add Appearance system configuration page"
+ message: |-
+ Add Appearance system configuration page to customize Jenkins' look and feel.
+ - type: major rfe
+ category: rfe
+ pull: 8528
+ authors:
+ - jglick
+ - Vlatombe
+ pr_title: "Avoid saving disabled status when deleting a project"
+ references:
+ - pull: 8494
+ - pull: 8395
+ - pull: 8299
+ message: |-
+ Various performance optimizations.
+ Optimizations for loading, label parsing, and project deletion.
+ - type: major bug
+ category: bug
+ pull: 8448
+ authors:
+ - Vlatombe
+ pr_title: "Label parsing robustness fix"
+ message: |-
+ Prevent incorrect readResolve
implementations from breaking agent label parsing.
+ - type: rfe
+ category: rfe
+ pull: 8526
+ authors:
+ - basil
+ pr_title: "Automate Java version recommendation administrative monitor"
+ message: |-
+ Automate the display of an administrative monitor when approaching Java end of life (EOL) dates.
+ - type: rfe
+ category: rfe
+ authors:
+ - philfry
+ pr_title: "RPM: Remove System V initialization script"
+ references:
+ - url: https://github.com/jenkinsci/packaging/pull/409
+ title: pull 409 (packaging)
+ - url: https://www.jenkins.io/blog/2022/03/25/systemd-migration/
+ title: Linux install packages migrated from System V init to systemd
+ message: |-
+ Remove System V initialization scripts from RPM based installers.
+ The System V initialization scripts were replaced in March 2022 with systemd initialization.
+ RPM users with a custom log directory no longer have a logrotate(8)
configuration out-of-the-box.
+ - type: rfe
+ category: rfe
+ pull: 8250
+ issue: 71087
+ authors:
+ - daniel-beck
+ pr_title: "[JENKINS-71087] Nicer 404 error pages"
+ message: |-
+ Add a nicer 404 error page.
+ - type: rfe
+ category: rfe
+ pull: 8503
+ authors:
+ - basil
+ pr_title: "Increase minimum required Remoting version from 4.7 to 4.13"
+ message: |-
+ The minimum required Remoting version has been increased from 4.7 to 4.13.
+ - type: rfe
+ category: rfe
+ pull: 8453
+ issue: 71950
+ authors:
+ - basil
+ pr_title: "[JENKINS-71950] List plugins in deterministic order"
+ message: |-
+ List plugins in deterministic order to improve diagnosability of plugin linkage errors.
+ - type: rfe
+ category: rfe
+ pull: 8208
+ authors:
+ - janfaracik
+ pr_title: "Display a notice when there are plugins installed or updates available"
+ message: |-
+ Display a notice when plugin updates are available or when there are no plugins installed.
+ - type: rfe
+ category: rfe
+ pull: 8265
+ issue: 71054
+ authors:
+ - yaroslavafenkin
+ pr_title: "[JENKINS-71054] Remove the treeview option for artifactList"
+ message: |-
+ Remove the treeview option for artifactList.
+ - type: rfe
+ category: rfe
+ pull: 8283
+ authors:
+ - meiswjn
+ pr_title: "Add logging for agent usage by job"
+ message: |-
+ Log agent usage by job.
+ - type: rfe
+ category: rfe
+ pull: 8262
+ issue: 71496
+ authors:
+ - mawinter69
+ pr_title: "[JENKINS-71496] Make tab pane selection reachable via keyboard"
+ message: |-
+ Make tab panes accessible via keyboard.
+ - type: rfe
+ category: rfe
+ pull: 8273
+ issue: 71366
+ authors:
+ - mattpulver
+ pr_title: "[JENKINS-71366] Set sandbox allow-same-origin in DEFAULT_CSP_VALUE."
+ message: |-
+ Add allow-same-origin
to the sandbox
ContentSecurityPolicy directive of workspace and artifact browsers if the Resource Root URL feature is not used.
+ Allow requests to resources like stylesheets and images, even if a reverse proxy prohibits cross-site requests.
+ - type: rfe
+ category: rfe
+ pull: 8129
+ authors:
+ - janfaracik
+ pr_title: Add last build status to job page
+ message: |-
+ Add last build status to job page.
+ - type: rfe
+ category: rfe
+ pull: 8446
+ authors:
+ - mustafau
+ pr_title: "Turkish localization fixes for the new job page"
+ references:
+ - pull: 8368
+ message: |-
+ Updates to Turkish localization for jobs.
+ - type: rfe
+ category: rfe
+ pull: 8258
+ authors:
+ - daniel-beck
+ pr_title: Remove Rebuilder Plugin from setup wizard options
+ message: |-
+ Remove the rebuild plugin from the setup wizard plugin selection.
+ - type: rfe
+ category: rfe
+ pull: 8503
+ authors:
+ - basil
+ pr_title: "Remove KXML2 library"
+ message: |-
+ Stop shipping net.sf.kxml:kxml2
because Jenkins no longer depends on it.
+ - type: bug
+ category: bug
+ pull: 8425
+ issue: 71479
+ authors:
+ - dwnusbaum
+ pr_title: "[JENKINS-71479] Do not use SCSS lighten function directly to avoid\
+ \ invalid CSS"
+ message: |-
+ Fix invalid CSS which caused some buttons to become invisible on hover.
+ - type: bug
+ category: bug
+ pull: 8529
+ issue: 72067
+ authors:
+ - basil
+ pr_title: "[JENKINS-72067] High memory usage from `XStream2.AssociatedConverterImpl`"
+ message: |-
+ Reduce high memory usage from XStream2.AssociatedConverterImpl
.
+ - type: bug
+ category: bug
+ pull: 8474
+ authors:
+ - jtnord
+ pr_title: fix signup autofocus
+ message: |-
+ Prevent log spam when using the Jenkins security database and users signup.
+ - type: bug
+ category: bug
+ pull: 8493
+ issue: 71880
+ authors:
+ - mawinter69
+ pr_title: "[JENKINS-71880] fix notification in breadcrumb"
+ message: |-
+ Show a confirmation popup when triggering a task action from a context menu.
+ - type: bug
+ category: bug
+ pull: 8485
+ issue: 72018
+ authors:
+ - flabrie
+ pr_title: "[JENKINS-72018] Form entries in .repeated-chunk using .show-if-not-only\
+ \ CSS class are not hidden when they are alone"
+ message: |-
+ Hide the delete button from the only repeatable element in configuration forms when at least one element is expected.
+ - type: bug
+ category: bug
+ pull: 8490
+ issue: 72016
+ authors:
+ - jglick
+ pr_title: "[JENKINS-72016] Define a thread pool for `ProxyConfiguration`'s\
+ \ `HttpClient`"
+ message: |-
+ Do not create a large number of threads when making numerous HTTP requests.
+ - type: bug
+ category: bug
+ pull: 8471
+ issue: 71983
+ authors:
+ - mawinter69
+ pr_title: "[JENKINS-71983] allow symbols in MenuItem#withIconClass"
+ message: |-
+ Symbols display in breadcrumbs now.
+ - type: bug
+ category: bug
+ pull: 8416
+ issue: 38520
+ authors:
+ - dependabot[bot]
+ pr_title: "[JENKINS-38520] Every message in agent log appears twice with the\
+ \ `-agentLog` option"
+ message: |-
+ Message no longer appears twice when the agentLog
option is used.
+ - type: bug
+ category: bug
+ pull: 8388
+ issue: 71848
+ authors:
+ - daniel-beck
+ pr_title: "[JENKINS-71848] Remove admin monitors popup from `/manage/` again"
+ message: |-
+ Hide administrative monitors icons/popup in the header of Manage Jenkins, as they're shown directly on the page.
+ - type: bug
+ category: bug
+ pull: 8378
+ issue: 61452
+ authors:
+ - jglick
+ pr_title: "[JENKINS-61452] Tolerate corrupt Base64 in `PlainTextConsoleOutputStream`"
+ message: |-
+ The plain text console log will still be printed even if some console annotations are corrupt.
+ - type: bug
+ category: bug
+ pull: 8387
+ issue: 71833
+ authors:
+ - daniel-beck
+ pr_title: "[JENKINS-71833] Fix link to job in slow trigger admin monitor"
+ message: |-
+ Fix link to job in the message informing administrators of trigger computations that run for an unusually long time.
+ - type: bug
+ category: bug
+ pull: 8089
+ authors:
+ - dten
+ pr_title: Use standard size node icon even with long node names
+ message: |-
+ Use standard size node icon even with long node names.
+ - type: bug
+ category: bug
+ pull: 8288
+ issue: 71186
+ authors:
+ - programbeginnerTW
+ pr_title: "[JENKINS-71186] - Avoid a warning from web application scanners"
+ message: |-
+ Add the X-Content-Type-Options
HTTP header to the response from the agent listener.
+ Silence security scanners that incorrectly report an issue when the HTTP header is missing.
+ - type: bug
+ category: bug
+ pull: 8293
+ issue: 71698
+ authors:
+ - timja
+ pr_title: "[JENKINS-71698] Only disable plugin manager button if none are\
+ \ selected"
+ message: |-
+ Only disable the plugin manager "install" button if no plugins are selected.
+ - type: bug
+ category: bug
+ pull: 8233
+ authors:
+ - jglick
+ pr_title: "`LazyBuildMixIn.getEstimatedDurationCandidates` duplication"
+ message: |-
+ Estimate project duration accurately in more cases.
+
# DO NOT EDIT THIS FILE DIRECTLY
# ALL CHANGES MUST GO THROUGH PULL REQUESTS
# MALFORMED FILE CONTENTS WILL BREAK THE SITE BUILD
diff --git a/content/_data/upgrades/2-426-1.adoc b/content/_data/upgrades/2-426-1.adoc
new file mode 100644
index 000000000000..72e80e5e0093
--- /dev/null
+++ b/content/_data/upgrades/2-426-1.adoc
@@ -0,0 +1,47 @@
+==== Prototype removed from Jenkins
+
+As of Jenkins 2.426.1, Prototype has been removed from Jenkins core.
+This was initially removed in the weekly 2.426 release and is the result of work done since May 2023.
+Plugins that had previously used Prototype must have its usage removed accordingly.
+Thanks to all of the work from plugin maintainers and contributors, there has been great progress made to ensure that plugins have been updated.
+The list of plugins can be found in our link:https://docs.google.com/spreadsheets/d/1dpaKALZaK0_HIGy6ony3wnegr1frTg3u1lngG4KdoC8/edit#gid=0[tracking sheet].
+At this time, there are four plugins with over 800 installs that have not removed Prototype from their configuration.
+These plugins are:
+
+* link:https://github.com/jenkinsci/xray-connector-plugin/issues/75[Xray Connector]
+* link:https://issues.jenkins.io/browse/JENKINS-71308[Synopsys Coverity]
+* link:https://issues.jenkins.io/browse/JENKINS-71309[qTest]
+* link:https://issues.jenkins.io/browse/JENKINS-71311[Azure App Service]
+
+There are eight other plugins, all under 700 installs, that have issues created for them in the Jenkins issue tracker, linked to the overall link:https://issues.jenkins.io/browse/JENKINS-71309?jql=project%20%3D%20JENKINS%20AND%20resolution%20%3D%20Unresolved%20AND%20%22Epic%20Link%22%20%3D%20JENKINS-70906%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC[Prototype removal epic].
+
+==== Minimum required Remoting version updated to 4.13
+
+The minimum required Remoting version has been increased to 4.13, which was released on March 4, 2022.
+When an agent with a Remoting version older than 4.13 connects to the Jenkins controller, the agent connection is rejected.
+Ensure that all agents are running a recent version of Remoting prior to upgrading.
+Agents with unsupported Remoting versions can be allowed to connect to the controller by setting the `hudson.slaves.SlaveComputer.allowUnsupportedRemotingVersions` system property to true.
+
+==== Treeview option removed for artifactList
+
+In an effort to ensure content security policy (CSP) compatibility, `hudson.model.Run#TREE_CUTOFF` has been removed in favor of `hudson.model.Run#LIST_CUTOFF`.
+The treeview option was using inline JavaScript, going against the link:https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks[Jenkins CSP standards].
+This is also part of the larger project to link:https://issues.jenkins.io/browse/JENKINS-71014[remove or update any non-compliant code in Jenkins core].
+
+==== Remove System V initialization script
+
+Since March 2022, Jenkins has required the use of `systemd` to manage services.
+For newer systems such as RHEL 7 or Fedora 15 (and above), `systemd` is used and there are no issues.
+However, earlier versions are still using the System V initialization script.
+To remedy this, the System V init script has been removed and RPM users with a custom log directory will no longer have a `logrotate(8)` configuration out-of-the-box.
+
+==== End of support for Red Hat Enterprise Linux 7 and is derivatives
+
+The May 30, 2023 link:/blog/2023/05/30/operating-system-end-of-life/[end of life operating systems blog post] announced the end of support for Red Hat Enterprise Linux 7 and its derivatives like CentOS 7, Scientific Linux 7, and Oracle Linux 7.
+Users should replace their Red Hat Enterprise Linux 7 installations with another operating system.
+If they prefer to continue with Red Hat or one of its derivatives, they have many alternatives, including:
+
+* link:https://access.redhat.com/products/discover-red-hat-enterprise-linux/[Red Hat Enterprise Linux] 8 or 9
+* link:https://almalinux.org/[AlmaLinux] 8 or 9
+* link:https://rockylinux.org/[Rocky Linux] 8 or 9
+* link:https://www.oracle.com/linux/[Oracle Linux] 8 or 9