Maintenance with downtime of JFrog Artifactory (repo.jenkins-ci.org) December 18, 2022 December 18, 2022: our sponsor JFrog will proceed to perform maintenance of our "jenkinsci" Artifactory instance. Expect a complete downtime of about 6 hours due to the nature of this maintenance. The maintenance involves cloud migration from Google Cloud to Amazon Web Services. Impacts Only Jenkins contributors will be impacted, as no releases or builds on ci.jenkins.io or on...

November 2022 Welcome to the Jenkins Newsletter! This is a compilation of progress within the project, highlighted by Jenkins Special Interest Groups (SIGs) for the month of November. Got Inspiration? We would love to highlight your cool Jenkins innovations. Share your story and you could be in the next Jenkins newsletter. View previous editions of the Jenkins Newsletter here! Happy reading! Highlights: Congratulations to the new officers and members of the...

October 2022 Welcome to the Jenkins Newsletter! This is a compilation of progress within the project, highlighted by Jenkins Special Interest Groups (SIGs) for the month of October. View previous editions of the Jenkins Newsletter here! Happy reading! Security Update One security advisory during October about plugins 28 impacted plugins 8 without fixes, as explained in our process 4 plugins were suspended from distribution Due to the corrections applied for SECURITY-2824 in the Groovy...

The Jenkins project participated in Google Summer of Code 2022. Congratulations to all participants and we thank all participants for their contributions. Now that the event is over, this page contains an archive of the 2022 specific information. Projects All four projects have been successfully completed in 2022. You can find the project information on the project pages: Plugin Health Scoring System by Dheeraj Singh Jodha Jenkinsfile Runner Action for GitHub...

September 2022 Welcome to the Jenkins Newsletter! This is a compilation of progress within the project, highlighted by Jenkins Special Interest Groups (SIGs) for the month of September. Happy reading! Security Update Two security advisories during September with "special" nature for Jenkins core One was only impacting very specifically configured instance The other was only impacting three successive weekly releases Infrastructure Update Dropping JDK8 from all agents and controllers processes with the 2.361.1...

We are excited to announce that the relationship between DigitalOcean and Jenkins continues to grow! We want to thank DigitalOcean for providing such incredible support to the Jenkins project. DigitalOcean has provided a substantial donation of $18,000 to the Jenkins project. This is in addition to their previous sponsorship. Combining these, DigitalOcean has granted over $20,000 to the Jenkins project. The funding aspect is clear, but there are several...

Introduction The Jenkins project is committed to delivering a world-class platform experience for end users and developers alike. At the core of this experience is Java, an object-oriented programming language with a cross-platform runtime in the form of the Java virtual machine (JVM). Since its inception, the Jenkins project has been a major consumer of Java, distributing over 1,800 plugins to an installed base of over 300,000...

The Jenkins project provides a download mirror infrastructure allowing to download Jenkins packages and plugins from a download server close to your location. How Does it Work? When a download request is emitted to either mirrors.jenkins.io or get.jenkins.io, an HTTP redirect response to a mirror download server is answered. The Jenkins infrastructure uses a database of existing mirror servers provided by volunteers and donators to select the...

The Postman API Platform is redefining how APIs are built, managed, and consumed. An important aspect of API management is continuous building, testing, and deployment with CI/CD tools. With the latest release of Postman, we bring the API builds closer to your API by integrating with Jenkins. Observe your Jenkins builds While you iterate over your APIs, the Jenkins builds are triggered multiple times. While some of you may...

A remote code execution vulnerability has been identified in the Spring Framework. This vulnerability is identified as CVE-2022-22965. Spring officially reacted early in an early announcement. SpringShell in Jenkins Core and Plugins The Jenkins security team has confirmed that the Spring vulnerability is not affecting Jenkins Core. There is no impact because we are using Stapler as a servlet, and neither Spring MVC nor Spring WebFlux. An analysis was done...