October 2022 Welcome to the Jenkins Newsletter! This is a compilation of progress within the project, highlighted by Jenkins Special Interest Groups (SIGs) for the month of October. Happy reading! Security Update One security advisory during October about plugins 28 impacted plugins 8 without fixes, as explained in our process 4 plugins were suspended from distribution Due to the corrections applied for SECURITY-2824 in the Groovy sandbox, we strongly recommend you to update...

The Jenkins project participated in Google Summer of Code 2022. Congratulations to all participants and we thank all participants for their contributions. Now that the event is over, this page contains an archive of the 2022 specific information. Projects All four projects have been successfully completed in 2022. You can find the project information on the project pages: Plugin Health Scoring System by Dheeraj Singh Jodha Jenkinsfile Runner Action for GitHub...

September 2022 Welcome to the Jenkins Newsletter! This is a compilation of progress within the project, highlighted by Jenkins Special Interest Groups (SIGs) for the month of September. Happy reading! Security Update Two security advisories during September with "special" nature for Jenkins core One was only impacting very specifically configured instance The other was only impacting three successive weekly releases Infrastructure Update Dropping JDK8 from all agents and controllers processes with the 2.361.1...

We are excited to announce that the relationship between DigitalOcean and Jenkins continues to grow! We want to thank DigitalOcean for providing such incredible support to the Jenkins project. DigitalOcean has provided a substantial donation of $18,000 to the Jenkins project. This is in addition to their previous sponsorship. Combining these, DigitalOcean has granted over $20,000 to the Jenkins project. The funding aspect is clear, but there are several...

Introduction The Jenkins project is committed to delivering a world-class platform experience for end users and developers alike. At the core of this experience is Java, an object-oriented programming language with a cross-platform runtime in the form of the Java virtual machine (JVM). Since its inception, the Jenkins project has been a major consumer of Java, distributing over 1,800 plugins to an installed base of over 300,000...

The Jenkins project provides a download mirror infrastructure allowing to download Jenkins packages and plugins from a download server close to your location. How Does it Work? When a download request is emitted to either mirrors.jenkins.io or get.jenkins.io, an HTTP redirect response to a mirror download server is answered. The Jenkins infrastructure uses a database of existing mirror servers provided by volunteers and donators to select the...

The Postman API Platform is redefining how APIs are built, managed, and consumed. An important aspect of API management is continuous building, testing, and deployment with CI/CD tools. With the latest release of Postman, we bring the API builds closer to your API by integrating with Jenkins. Observe your Jenkins builds While you iterate over your APIs, the Jenkins builds are triggered multiple times. While some of you may...

A remote code execution vulnerability has been identified in the Spring Framework. This vulnerability is identified as CVE-2022-22965. Spring officially reacted early in an early announcement. SpringShell in Jenkins Core and Plugins The Jenkins security team has confirmed that the Spring vulnerability is not affecting Jenkins Core. There is no impact because we are using Stapler as a servlet, and neither Spring MVC nor Spring WebFlux. An analysis was done...

Jenkins Contributor Awards for 2022 are being run by the Continuous Delivery Foundation (CDF) along with many other CDF Community Awards. The nominations are open and are being accepted using GitHub issues to make the process transparent. Any contributor is eligible! The deadline to nominate someone has been extended to April 11, 2022. Voting will open later in April. Nominate contributors or vote with reactions/comments for all three Jenkins...

Jenkins Contributor Awards for 2022 will be run by the Continuous Delivery Foundation (CDF) along with many other CDF Community Awards. The nominations are currently open and are being accepted using GitHub issues to make the process more transparent. Any contributor is eligible! The deadline to nominate someone is March 29, 2022. Voting will open in April. Nominate contributors or vote with reactions/comments for all three Jenkins awards: Most Valuable...