diff --git a/content/_data/changelogs/lts.yml b/content/_data/changelogs/lts.yml index 2d8bd0a33501..a3bef5fa9062 100644 --- a/content/_data/changelogs/lts.yml +++ b/content/_data/changelogs/lts.yml @@ -9733,6 +9733,494 @@ message: |- Restore context menus of model links in build history views and administrative monitors (regression in 2.402). +- version: "2.426.1" + date: 2023-11-15 + banner: > + Short container image tags (without "jdk" in them) such as jenkins/jenkins:2.426.1 are now using Java 17. + If you need to continue using Java 11, use tags like jenkins/jenkins:2.426.1-jdk11. + lts_predecessor: "2.414.3" + lts_baseline: "2.426" + changes: # compared to lts_baseline 2.426 - extracted from the RC commit(s) + + - type: major bug + category: bug + pull: 8422 + authors: + - daniel-beck + pr_title: "[JENKINS-71252][JENKINS-70793] Multiple form validation fixes" + references: + - issue: 71252 + - issue: 70793 + message: |- + Show form validation results for form elements that are initially hidden. + Remove previous form validation errors when the form validation is updated with new content (regression in 2.355). + - type: major bug + category: bug + issue: 72170 + pull: 8602 + authors: + - mawinter69 + pr_title: "[JENKINS-72170] fix nested hetero-list entries with mixture of inputs and buttons" + message: |- + Fix multibranch Pipeline Add source and other uses that mix inputs and buttons (regression in 2.422). + - type: major bug + category: bug + issue: 72163 + authors: + - basil + pr_title: "[JENKINS-72163] Retry on initial connection failure occurs in one entrypoint but not the other" + references: + - url: https://github.com/jenkinsci/remoting/pull/675 + title: Remoting PR 675 + message: |- + Add sleep call when -noReconnect is not specified for Kubernetes agents. + - type: major bug + category: bug + issue: 65368 + authors: + - sunweisheng + pr_title: "Remoting agent.jar does not work behind proxy" + message: |- + Add proxy support for Remoting. + - type: major bug + category: regression + pull: 8564 + issue: 71937 + authors: + - Vlatombe + pr_title: "[JENKINS-71937] Fix deprecated 'Slave' constructor" + message: |- + Fix agent allocation due to label issue detected by vSphere Cloud plugin (regression in 2.421). + - type: major bug + category: regression + pull: 8613 + issue: 72189 + authors: + - mawinter69 + pr_title: "[JENKINS-72189] fix drag&drop handle for existing repeatables" + message: |- + Fix drag and drop handle for existing repeatables (regression in 2.335). + - type: rfe + category: rfe + pull: 8564 + issue: 72248 + authors: + - daniel-beck + pr_title: "Add telemetry for Jenkins uptime" + message: |- + Add telemetry for Jenkins uptime. + - type: rfe + category: rfe + pull: 8587 + issue: 72156 + authors: + - olamy + pr_title: "[JENKINS-72156] Backport Upgrade to Winstone 6.14 which contains an upgrade to Jetty 10.0.17" + references: + - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.13 + title: Winstone 6.13 changelog + - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.14 + title: Winstone 6.14 changelog + - url: https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16 + title: Jetty 10.0.16 changelog + - url: https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.17 + title: Jetty 10.0.17 changelog + - url: https://nvd.nist.gov/vuln/detail/CVE-2023-44487 + title: CVE-2023-44487 + message: |- + Upgrade Winstone from 6.12 to 6.14. + This includes the upgrade of Jetty from 10.0.15 to 10.0.17. + The Jetty upgrade includes fixes for several CVEs. + - type: bug + category: regression + pull: 8606 + issue: 72179 + authors: + - daniel-beck + pr_title: "[JENKINS-72179] Show description of boolean build parameter values" + message: |- + Show the description of boolean build parameter values on the Parameters view (regression in 2.179). + - type: bug + category: regression + pull: 8492 + issue: 72020 + authors: + - Vlatombe + pr_title: "[JENKINS-72020] Restore ability to reorder clouds" + message: |- + Allow clouds to be reordered. + This was previously possible, but disappeared when the cloud management was moved to a separate page (regression in 2.403). + - type: bug + category: regression + pull: 8674 + issue: 70994 + authors: + - basil + pr_title: "[JENKINS-70994] Upgrade bundled SnakeYAML plugin from 1.33-95.va_b_a_e3e47b_fa_4 to 2.2-111.vc6598e30cc65" + message: |- + Update SnakeYAML plugin to 2.2 to silence security scanners. + + lts_changes: # compared to lts_predecessor 2.414.3 (selected by personal review) + + - type: security + authors: + - Kevin-CB + - dwnusbaum + message: |- + Important security fixes. + references: + - url: /security/advisory/2023-09-20/ + title: 2023-09-20 security advisory + - url: /security/advisory/2023-07-26/ + title: 2023-07-26 security advisory + - type: major rfe + category: major rfe + pull: 7781 + authors: + - timja + - basil + pr_title: "[JENKINS-70906] Remove prototype from core" + references: + - issue: 70906 + - pull: 7781 + - url: https://www.jenkins.io/blog/2023/05/12/removing-prototype-from-jenkins/ + title: Prototype removal blog post + message: |- + Remove outdated Prototype.js library. + - type: major rfe + category: major rfe + authors: + - MarkEWaite + pr_title: "Remove CentOS 7 container images" + references: + - url: "/blog/2023/05/30/operating-system-end-of-life/" + title: Red Hat Enterprise Linux 7 and CentOS 7 end of life blog post + - url: https://github.com/jenkinsci/docker/pull/1777 + title: Docker pull request 1777 + message: |- + Stop delivering CentOS 7 container images as part of the end of support for Red Hat Enterprise Linux 7 and its derivatives. + - type: major rfe + category: rfe + pull: 7938 + issue: 71438 + authors: + - mawinter69 + pr_title: "[JENKINS-71438] Replace browser confirm with modal dialogs" + message: |- + Replace browser confirm with modal dialogs in many places. + Add API for alert, confirm, prompt, modal and form dialogs. + - type: major rfe + category: rfe + pull: 8418 + authors: + - mawinter69 + - janfaracik + - NotMyFault + pr_title: "Replace hetero-list YUI button and menu with new style button and tippy.js menu" + references: + - pull: 8381 + - pull: 8376 + - pull: 8375 + - pull: 8363 + - pull: 8180 + message: |- + Updates to various UI elements. + Modernize buttons, menus, link design, and content blocks. + - type: major rfe + category: rfe + pull: 8403 + authors: + - timja + pr_title: "Add Appearance system configuration page" + message: |- + Add Appearance system configuration page to customize Jenkins' look and feel. + - type: major rfe + category: rfe + pull: 8528 + authors: + - jglick + - Vlatombe + pr_title: "Avoid saving disabled status when deleting a project" + references: + - pull: 8494 + - pull: 8395 + - pull: 8299 + message: |- + Various performance optimizations. + Optimizations for loading, label parsing, and project deletion. + - type: major bug + category: bug + pull: 8448 + authors: + - Vlatombe + pr_title: "Label parsing robustness fix" + message: |- + Prevent incorrect readResolve implementations from breaking agent label parsing. + - type: rfe + category: rfe + pull: 8526 + authors: + - basil + pr_title: "Automate Java version recommendation administrative monitor" + message: |- + Automate the display of an administrative monitor when approaching Java end of life (EOL) dates. + - type: rfe + category: rfe + authors: + - philfry + pr_title: "RPM: Remove System V initialization script" + references: + - url: https://github.com/jenkinsci/packaging/pull/409 + title: pull 409 (packaging) + - url: https://www.jenkins.io/blog/2022/03/25/systemd-migration/ + title: Linux install packages migrated from System V init to systemd + message: |- + Remove System V initialization scripts from RPM based installers. + The System V initialization scripts were replaced in March 2022 with systemd initialization. + RPM users with a custom log directory no longer have a logrotate(8) configuration out-of-the-box. + - type: rfe + category: rfe + pull: 8250 + issue: 71087 + authors: + - daniel-beck + pr_title: "[JENKINS-71087] Nicer 404 error pages" + message: |- + Add a nicer 404 error page. + - type: rfe + category: rfe + pull: 8503 + authors: + - basil + pr_title: "Increase minimum required Remoting version from 4.7 to 4.13" + message: |- + The minimum required Remoting version has been increased from 4.7 to 4.13. + - type: rfe + category: rfe + pull: 8453 + issue: 71950 + authors: + - basil + pr_title: "[JENKINS-71950] List plugins in deterministic order" + message: |- + List plugins in deterministic order to improve diagnosability of plugin linkage errors. + - type: rfe + category: rfe + pull: 8208 + authors: + - janfaracik + pr_title: "Display a notice when there are plugins installed or updates available" + message: |- + Display a notice when plugin updates are available or when there are no plugins installed. + - type: rfe + category: rfe + pull: 8265 + issue: 71054 + authors: + - yaroslavafenkin + pr_title: "[JENKINS-71054] Remove the treeview option for artifactList" + message: |- + Remove the treeview option for artifactList. + - type: rfe + category: rfe + pull: 8283 + authors: + - meiswjn + pr_title: "Add logging for agent usage by job" + message: |- + Log agent usage by job. + - type: rfe + category: rfe + pull: 8262 + issue: 71496 + authors: + - mawinter69 + pr_title: "[JENKINS-71496] Make tab pane selection reachable via keyboard" + message: |- + Make tab panes accessible via keyboard. + - type: rfe + category: rfe + pull: 8273 + issue: 71366 + authors: + - mattpulver + pr_title: "[JENKINS-71366] Set sandbox allow-same-origin in DEFAULT_CSP_VALUE." + message: |- + Add allow-same-origin to the sandbox ContentSecurityPolicy directive of workspace and artifact browsers if the Resource Root URL feature is not used. + Allow requests to resources like stylesheets and images, even if a reverse proxy prohibits cross-site requests. + - type: rfe + category: rfe + pull: 8129 + authors: + - janfaracik + pr_title: Add last build status to job page + message: |- + Add last build status to job page. + - type: rfe + category: rfe + pull: 8446 + authors: + - mustafau + pr_title: "Turkish localization fixes for the new job page" + references: + - pull: 8368 + message: |- + Updates to Turkish localization for jobs. + - type: rfe + category: rfe + pull: 8258 + authors: + - daniel-beck + pr_title: Remove Rebuilder Plugin from setup wizard options + message: |- + Remove the rebuild plugin from the setup wizard plugin selection. + - type: rfe + category: rfe + pull: 8503 + authors: + - basil + pr_title: "Remove KXML2 library" + message: |- + Stop shipping net.sf.kxml:kxml2 because Jenkins no longer depends on it. + - type: bug + category: bug + pull: 8425 + issue: 71479 + authors: + - dwnusbaum + pr_title: "[JENKINS-71479] Do not use SCSS lighten function directly to avoid\ + \ invalid CSS" + message: |- + Fix invalid CSS which caused some buttons to become invisible on hover. + - type: bug + category: bug + pull: 8529 + issue: 72067 + authors: + - basil + pr_title: "[JENKINS-72067] High memory usage from `XStream2.AssociatedConverterImpl`" + message: |- + Reduce high memory usage from XStream2.AssociatedConverterImpl. + - type: bug + category: bug + pull: 8474 + authors: + - jtnord + pr_title: fix signup autofocus + message: |- + Prevent log spam when using the Jenkins security database and users signup. + - type: bug + category: bug + pull: 8493 + issue: 71880 + authors: + - mawinter69 + pr_title: "[JENKINS-71880] fix notification in breadcrumb" + message: |- + Show a confirmation popup when triggering a task action from a context menu. + - type: bug + category: bug + pull: 8485 + issue: 72018 + authors: + - flabrie + pr_title: "[JENKINS-72018] Form entries in .repeated-chunk using .show-if-not-only\ + \ CSS class are not hidden when they are alone" + message: |- + Hide the delete button from the only repeatable element in configuration forms when at least one element is expected. + - type: bug + category: bug + pull: 8490 + issue: 72016 + authors: + - jglick + pr_title: "[JENKINS-72016] Define a thread pool for `ProxyConfiguration`'s\ + \ `HttpClient`" + message: |- + Do not create a large number of threads when making numerous HTTP requests. + - type: bug + category: bug + pull: 8471 + issue: 71983 + authors: + - mawinter69 + pr_title: "[JENKINS-71983] allow symbols in MenuItem#withIconClass" + message: |- + Symbols display in breadcrumbs now. + - type: bug + category: bug + pull: 8416 + issue: 38520 + authors: + - dependabot[bot] + pr_title: "[JENKINS-38520] Every message in agent log appears twice with the\ + \ `-agentLog` option" + message: |- + Message no longer appears twice when the agentLog option is used. + - type: bug + category: bug + pull: 8388 + issue: 71848 + authors: + - daniel-beck + pr_title: "[JENKINS-71848] Remove admin monitors popup from `/manage/` again" + message: |- + Hide administrative monitors icons/popup in the header of Manage Jenkins, as they're shown directly on the page. + - type: bug + category: bug + pull: 8378 + issue: 61452 + authors: + - jglick + pr_title: "[JENKINS-61452] Tolerate corrupt Base64 in `PlainTextConsoleOutputStream`" + message: |- + The plain text console log will still be printed even if some console annotations are corrupt. + - type: bug + category: bug + pull: 8387 + issue: 71833 + authors: + - daniel-beck + pr_title: "[JENKINS-71833] Fix link to job in slow trigger admin monitor" + message: |- + Fix link to job in the message informing administrators of trigger computations that run for an unusually long time. + - type: bug + category: bug + pull: 8089 + authors: + - dten + pr_title: Use standard size node icon even with long node names + message: |- + Use standard size node icon even with long node names. + - type: bug + category: bug + pull: 8288 + issue: 71186 + authors: + - programbeginnerTW + pr_title: "[JENKINS-71186] - Avoid a warning from web application scanners" + message: |- + Add the X-Content-Type-Options HTTP header to the response from the agent listener. + Silence security scanners that incorrectly report an issue when the HTTP header is missing. + - type: bug + category: bug + pull: 8293 + issue: 71698 + authors: + - timja + pr_title: "[JENKINS-71698] Only disable plugin manager button if none are\ + \ selected" + message: |- + Only disable the plugin manager "install" button if no plugins are selected. + - type: bug + category: bug + pull: 8233 + authors: + - jglick + pr_title: "`LazyBuildMixIn.getEstimatedDurationCandidates` duplication" + message: |- + Estimate project duration accurately in more cases. + # DO NOT EDIT THIS FILE DIRECTLY # ALL CHANGES MUST GO THROUGH PULL REQUESTS # MALFORMED FILE CONTENTS WILL BREAK THE SITE BUILD diff --git a/content/_data/upgrades/2-426-1.adoc b/content/_data/upgrades/2-426-1.adoc new file mode 100644 index 000000000000..72e80e5e0093 --- /dev/null +++ b/content/_data/upgrades/2-426-1.adoc @@ -0,0 +1,47 @@ +==== Prototype removed from Jenkins + +As of Jenkins 2.426.1, Prototype has been removed from Jenkins core. +This was initially removed in the weekly 2.426 release and is the result of work done since May 2023. +Plugins that had previously used Prototype must have its usage removed accordingly. +Thanks to all of the work from plugin maintainers and contributors, there has been great progress made to ensure that plugins have been updated. +The list of plugins can be found in our link:https://docs.google.com/spreadsheets/d/1dpaKALZaK0_HIGy6ony3wnegr1frTg3u1lngG4KdoC8/edit#gid=0[tracking sheet]. +At this time, there are four plugins with over 800 installs that have not removed Prototype from their configuration. +These plugins are: + +* link:https://github.com/jenkinsci/xray-connector-plugin/issues/75[Xray Connector] +* link:https://issues.jenkins.io/browse/JENKINS-71308[Synopsys Coverity] +* link:https://issues.jenkins.io/browse/JENKINS-71309[qTest] +* link:https://issues.jenkins.io/browse/JENKINS-71311[Azure App Service] + +There are eight other plugins, all under 700 installs, that have issues created for them in the Jenkins issue tracker, linked to the overall link:https://issues.jenkins.io/browse/JENKINS-71309?jql=project%20%3D%20JENKINS%20AND%20resolution%20%3D%20Unresolved%20AND%20%22Epic%20Link%22%20%3D%20JENKINS-70906%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC[Prototype removal epic]. + +==== Minimum required Remoting version updated to 4.13 + +The minimum required Remoting version has been increased to 4.13, which was released on March 4, 2022. +When an agent with a Remoting version older than 4.13 connects to the Jenkins controller, the agent connection is rejected. +Ensure that all agents are running a recent version of Remoting prior to upgrading. +Agents with unsupported Remoting versions can be allowed to connect to the controller by setting the `hudson.slaves.SlaveComputer.allowUnsupportedRemotingVersions` system property to true. + +==== Treeview option removed for artifactList + +In an effort to ensure content security policy (CSP) compatibility, `hudson.model.Run#TREE_CUTOFF` has been removed in favor of `hudson.model.Run#LIST_CUTOFF`. +The treeview option was using inline JavaScript, going against the link:https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks[Jenkins CSP standards]. +This is also part of the larger project to link:https://issues.jenkins.io/browse/JENKINS-71014[remove or update any non-compliant code in Jenkins core]. + +==== Remove System V initialization script + +Since March 2022, Jenkins has required the use of `systemd` to manage services. +For newer systems such as RHEL 7 or Fedora 15 (and above), `systemd` is used and there are no issues. +However, earlier versions are still using the System V initialization script. +To remedy this, the System V init script has been removed and RPM users with a custom log directory will no longer have a `logrotate(8)` configuration out-of-the-box. + +==== End of support for Red Hat Enterprise Linux 7 and is derivatives + +The May 30, 2023 link:/blog/2023/05/30/operating-system-end-of-life/[end of life operating systems blog post] announced the end of support for Red Hat Enterprise Linux 7 and its derivatives like CentOS 7, Scientific Linux 7, and Oracle Linux 7. +Users should replace their Red Hat Enterprise Linux 7 installations with another operating system. +If they prefer to continue with Red Hat or one of its derivatives, they have many alternatives, including: + +* link:https://access.redhat.com/products/discover-red-hat-enterprise-linux/[Red Hat Enterprise Linux] 8 or 9 +* link:https://almalinux.org/[AlmaLinux] 8 or 9 +* link:https://rockylinux.org/[Rocky Linux] 8 or 9 +* link:https://www.oracle.com/linux/[Oracle Linux] 8 or 9