instruction: Explain Docker containerization in CI/CD pipelines
output: Archived LTS Changelog Back to Recent LTS Changelog 2.414.2 September 20, 2023 Security Important security fixes. security advisory Major enhancement Add allow-same-origin to the sandbox Content-Security-Policy directive of workspace and artifact browsers if the Resource Root URL feature is not used.
  Allow requests to resources like stylesheets and images, even if a reverse proxy prohibits cross-site requests. JENKINS-71366 Major bug fix The plain text console log will still be printed even if some console annotations are corrupt. JENKINS-61452 Bug fix New login page breaks login-theme-plugin (regression in 2.404). JENKINS-71238 Fix invalid CSS which caused some buttons to become invisible on hover (regression in 2.402). JENKINS-71238 2.414.1 August 23, 2023 Changes since 2.414 Security Important security fix. 2023-07-26 security advisory Major enhancement Update Debian images to version 12.0 (bookworm). Docker pull request 1687 Enhancement Add last build status to job page. pull 8129 Bug fix Remove rebuilder plugin from the setup wizard plugin selection. JENKINS-71630 Only disable the plugin manager "install" button if no plugins are selected (regression in 2.414). JENKINS-71698 Notable changes since 2.401.3 Major enhancement Update to various UI elements.
  Update appearance and framework for dropdown links.
  Modernize forms and pages. pull 8210 , pull 8179 , pull 8076 , pull 8025 , pull 7989 , pull 8015 , pull 7962 , pull 7716 , pull 7836 , JENKINS-70805 , pull 7891 , JENKINS-71160 , pull 7870 , JENKINS-71115 , pull 7887 , JENKINS-71152 , pull 7420 , JENKINS-70115 , pull 7922 , JENKINS-71177 , pull 7770 Update UI and function of Log Recorder.
  Display a notice when there are no logs available. pull 8186 , pull 8164 Allow cancelling the quiet down mode of a safe restart with an optional custom message for safe restarts (with new default message).
  Use a less dangerous color for the safeRestart banner.
  Allow setting the full prepareShutdown message instead of only the reason.
  Show a hint on the "Jenkins Unavailable" page about safe restarts. JENKINS-70059 Major bug fix Prefix the name of input elements of ListView to prevent form submission issues when an Item (job) is named elements . JENKINS-71200 Enhancement Use dialogs to delete computers, views, clouds, users and log recorders instead of dedicated pages. JENKINS-13545 Improve Content Security Policy compatibility. JENKINS-71034 , JENKINS-71035 , JENKINS-71036 , JENKINS-71037 , pull 8054 , JENKINS-71042 , JENKINS-71044 , JENKINS-71045 , pull 8039 , JENKINS-71040 , JENKINS-71041 Upgrade Winstone from 6.10 to 6.12.
  This includes the upgrade of Jetty from 10.0.13 to 10.0.15.
  Add or update MIME types for JavaScript files, JavaScript module files, AV1 Image File (AVIF) files, Web Open Font Format (WOFF) files, and WebAssembly files. Winstone 6.11 changelog , Winstone 6.12 changelog , Jetty 10.0.14 changelog , Jetty 10.0.15 changelog Update to sign-in page on desktop and mobile.
  Remove animations and modernize page. pull 7995 , JENKINS-71246 , pull 7872 Update to Builds widget UI. JENKINS-70220 , pull 7870 , JENKINS-71115 Rework clouds management into multiple pages to better scale to large numbers of clouds.
  Users of EC2 Plugin should update it to version 2.0.7 or newer for compatibility. JENKINS-70729 Add Japanese translation of Apply. pull 8140 Switch the double-launch checker to a regular administrative monitor. pull 8127 Add support for jakarta.inject annotations. pull 8065 Reduce the circumstances under which recent old builds will be loaded when starting new builds. pull 7998 Refinements to class loading behavior looking up special formatters for XML configuration files. pull 7976 Add a user experimental flag to run Jenkins without Prototype.js.
  Plugin authors should enable this flag and fix any issues that result from the removal of Prototype.js.
  In the future Prototype.js will be removed from Jenkins core. pull 7948 Make "Skip to content" link visible through keyboard navigation. pull 7956 Bug fix Fix update center proxy configuration hyperlink in error messages. JENKINS-71244 Fix support of clouds without a config.jelly file. pull 7972 2.401.3 July 26, 2023 Security Important security fix. security advisory Bug fix Remove incorrect text from JENKINS_HOME help. pull 8161 2.401.2 June 28, 2023 Major enhancement Warn administrators when their Linux operating system is approaching end of life. pull 7913 , pull 8082 , JENKINS-71428 , End of life operating systems Enhancement Upgrade from Guice 5 to 6. Guice 6.0.0 changelog , pull 8121 2.401.1 May 31, 2023 Changes since 2.401 Security Important security fix. 2023-06-14 security advisory Bug fix Fix the writing of emojis to XML (regression in 2.403). JENKINS-71182 Do not write NUL values to XML files.
  A technically illegal #x0 (NUL) could be written to Jenkins XML files but could no longer be read.
  Now the write will fail as well (regression in 2.398). JENKINS-71139 Remove "" trailing text from system dropdown menu. JENKINS-71345 Fix the warning icon in the workspaces temporary directory message. JENKINS-71160 Show full width filter field for builds on pages less than 970 pixels wide. JENKINS-71115 Notable changes since 2.387.3 Enhancement Simplify the names of the settings in Manage Jenkins. pull 7661 Use a card layout instead of a table for the dashboard on mobile. pull 7581 Refresh the Build with Parameters interface. pull 7748 Revamp icon legend as a modal. pull 7718 Refresh the design of the About Jenkins page. pull 7712 Running pipeline build logs can now be displayed across controller restarts without reloading in some environments. pull 7614 Introduce user experimental flags. JENKINS-69853 Add a copy button for the code snippets that start agents and for the Jenkins home directory.
  Warn user that copy button requires HTTPS. pull 7625 , pull 7678 , pull 7665 , JENKINS-21052 The default connection mode for the Java CLI client is now webSocket .
  You can specify http to continue to use the former default (for example because you are running Jenkins in a servlet container other than the recommended builtin Jetty, or because you are running an unusual reverse proxy which does not support WebSocket).
  You can also continue to specify ssh to use SSH transport (for example because you prefer to authenticate with a private key rather than an API token), or use a native SSH client. pull 7605 Simplify loading of JavaScript and CSS.
  Users of OWASP DependencyTrack must upgrade to 4.3.1 or later, and users of ServiceNow CI/CD must upgrade to 2.1 or later. pull 7827 Upgrade Spring Framework from 5.3.26 to 5.3.27. Spring Framework 5.3.27 release notes Upgrade bundled Winstone from 6.7 to 6.10.
  Add the excludeProtocols option.
  Improve logging during shutdown. pull 7632 , Winstone 6.10 changelog , Winstone 6.9 changelog , Winstone 6.8 changelog Bug fix Fix  pointer exception on the "Manage Jenkins" page when HTTP/2 is enabled. JENKINS-70630 Hide the Restart Jenkins checkbox in the update center if the controller doesn't support it. JENKINS-69489 Move set node temporarily offline/online buttons to appbar. JENKINS-70394 2.387.3 May 3, 2023 Bug fix Restore New Node button in computer overview for users with node creation permission. JENKINS-70820 Fix Delete Build button text overflow. JENKINS-70809 Hide Restart Jenkins checkbox in the update center if the controller doesn't support it. JENKINS-69489 Support emojis in Job DSL scripts. JENKINS-69129 2.387.2 April 5, 2023 A new GPG signing key is used for the Jenkins long term support package repositories. Follow the instructions in the upgrade guide to install the new public key on your computer. Major bug fix Adjust WebSocket idle timeout to 60 seconds by default, to avoid "WebSocketTimeoutException: Connection Idle Timeout" issues. JENKINS-69955 Bug fix Restore the redirect destination of the pluginManager/installNecessaryPlugins API endpoint. JENKINS-70599 Update bundled plugins to include fixes announced in 2023-01-24 and 2023-02-15 Jenkins security advisories. Jenkins Security Advisory 2023-01-24 , Jenkins Security Advisory 2023-02-15 Enhancement Sign WAR file and Windows installer with new code signing certificate. pull 358 2.387.1 March 8, 2023 Changes since 2.387 Security Important security fixes. security advisory Major bug fix Move 'set node temporarily offline/online' buttons to app-bar to make them clickable again (regression in 2.385). JENKINS-70394 Allow WebSocket agent connections to time out after 5m if a write never succeeds. JENKINS-70531 Fix the TcpSlaveAgentListenerRescheduler functionality.
  TcpSlaveAgentListener is automatically restarted on failure. JENKINS-70334 Bug fix Add script-security update to LTS baseline. JENKINS-70487 Do not submit empty telemetry data if an error occurred during data collection. JENKINS-70533 Update bundled Apache Mina SSHD API plugins from 2.9.1-44.v476733c11f82 to 2.9.2-50.va_0e1f42659a_a. CVE-2022-45047 Enhancement Limit the maximum number of search results. Notable changes since 2.375.3 Major enhancement Update to various UI elements.
  Modernize table display, page layout, and buttons. pull 6843 , pull 6995 , JENKINS-69339 , pull 7373 , pull 7452 , pull 7173 , JENKINS-70128 , pull 7556 , JENKINS-70112 , pull 7555 , pull 7475 , JENKINS-70209 , pull 7425 , JENKINS-70117 , pull 7597 , JENKINS-70240 , pull 7314 , pull 7203 , pull 7171 , pull 7364 , JENKINS-69517 , pull 7366 , pull 7364 , pull 7229 , JENKINS-69715 , pull 7352 , pull 7367 , pull 7368 , pull 7399 , JENKINS-70036 , pull 7427 , JENKINS-70121 , pull 6511 Add missing breadcrumb items in various locations. pull 6912 , pull 7487 , pull 7488 , pull 7489 , pull 7490 , pull 7491 , pull 7492 , pull 7493 , pull 7494 , pull 7495 , pull 7496 Update ANTLR2 grammars and code to ANTLR4. pull 7293 Update Spring Security from 5.7.4 to 5.8.0.
  This update includes several fixes and improvements. Spring Security 5.7.5 release notes , Spring Security 5.8.0 release notes , CVE-2022-31690 , CVE-2022-31692 Set default file size rotation of AsyncPeriodicWork / AsyncAperiodicWork task logs to 10MB. JENKINS-64151 Update appearance of tooltips and replace old library with Tippy.js. pull 6408 Major bug fix Several fixes and improvements for Websocket agents. JENKINS-70105 , pull 7309 Enhancement The minimum required Remoting version has been increased to 4.7 (released on February 16, 2021). pull 7340 Add telemetry related to distributed builds. JENKINS-70199 Add telemetry for activation of permissions that are not enabled by default. JENKINS-70044 Remove the notice in the plugin manager Updates tab about newer plugin versions not compatible with your current core version.
  Limit the display of updates to plugin versions actually being offered by the update center for your core version. JENKINS-62332 Show recommended actions, such as "update affected plugins", in security warnings popup. pull 7046 Jenkins no longer bundles a patched version of the deprecated Commons HttpClient 3.x library for use by plugins.
  Plugins should be migrated to the native Java 11 HTTP client or updated to depend on the legacy Commons HttpClient 3.x API plugin. Commons HTTP Client , Apache HTTP Client Remove the deprecated Multijob plugin from the setup wizard. pull 7413 Remove the deprecated WMI Windows Agents plugin from the setup wizard. pull 7414 Do not report implied dependencies for WMI Windows Agents plugin. JENKINS-70301 Avoid unnecessary configuration save when reloading configuration from disk. pull 7305 Robustness improvement regarding build number collisions. JENKINS-23152 Remove support for log rotation via SIGALRM .
  The command-line argument --daemon has been removed. pull 7256 Upgrade XStream from 1.4.19 to 1.4.20.
  This maintenance release addresses the security vulnerabilities CVE-2022-40151 and CVE-2022-41966, causing a Denial of Service by raising a stack overflow.
  It also provides new converters for Optional and Atomic types. XStream 1.4.20 release notes , CVE-2022-40151 , CVE-2022-41966 Upgrade Guice from 5.0.1 to 5.1.0.
  Guice 5.1.0 contains eight fixes and improvements. Guice 5.1.0 release notes Upgrade Spring Framework from 5.3.23 to 5.3.24. Spring Framework 5.3.24 release notes Bug fix Improve tooltip performance. JENKINS-70178 Fix the update of disabled plugins. JENKINS-69183 Close connection on the agent if the agent's liveness ping receives no response. JENKINS-70414 Delay initialization of cryptography needed for TCP inbound agents unless and until such an agent is connected. pull 7514 Delete .disabled files when uninstalling a plugin. JENKINS-68194 Fix a race condition affecting the launch of inbound agents. pull 7378 2.375.4 March 8, 2023 Security Important security fixes. security advisory Enhancement Limit the maximum number of search results. 2.375.3 February 8, 2023 Bug fix Resolve implied dependencies on WMI Windows Agent plugin. JENKINS-70301 Prevent Angry Jenkins when checking a non http(s) based update center URL. JENKINS-70240 Remove negative letter-spacing to improve legibility in some languages and fonts (regression in 2.340 + 2.350). JENKINS-70209 Restore link to last breadcrumb in Console view. JENKINS-70169 2.375.2 January 11, 2023 Enhancement Add telemetry related to distributed builds. JENKINS-70199 Major bug fix Wait for 10 seconds before attempting to reconnect a WebSocket agent, regardless of whether or not the controller is responding. Slow down websocket re-connect Memory leak when repeatedly connecting WebSocket agents. JENKINS-70103 Bug fix Updated bundled Script Security plugin from 1189.vb_a_b_7c8fd5fde to 1190.v65867a_a_47126.
  Updated JUnit plugin from 1156.vcf492e95a_a_b_0 to 1160.vf1f01a_a_ea_b_7f. Jenkins Security Advisory 2022-11-15 Fix console-view bouncing when new entries appear. JENKINS-69587 2.375.1 November 30, 2022 Changes since 2.375 Major bug fix Prevent potential deadlocks on websocket agents. JENKINS-69890 Fix Gravatar error on profile page (regression in 2.335). JENKINS-70023 Enhancement Add telemetry for activation of permissions that are not enabled by default. JENKINS-70044 Notable changes since 2.361.4 Major enhancement Update to various UI elements.
  Modernize icons, navigation, and buttons. JENKINS-65124 , pull 6728 , pull 6924 , pull 6956 , pull 6907 , pull 7052 , pull 7098 , pull 7074 , pull 7185 , pull 6886 , JENKINS-69032 , pull 7183 , pull 7182 , pull 7217 , pull 7216 , pull 7205 , JENKINS-69714 , pull 7197 Improve breadcrumb bar accessibility. pull 6912 Update the design of notifications. pull 7049 Update the weather and status icons. JENKINS-65124 Major bug fix Prevent a stack overflow when loading a queue (regression in 2.361). JENKINS-69850 Enhancement Winstone 6.6: Upgrade Jetty from 10.0.11 to 10.0.12.
  Remove support for OpenSSL-style PEM-encoded RSA private keys when running Jenkins with the embedded Jetty (Winstone) container and TLS.
  The flags --httpsPrivateKey and --httpsCertificate have been removed.
  The flags --ajp13Port and --ajp13ListenAddress have been removed.
  The flags --handlerCountMax and --handlerCountMaxIdle have been removed.
  The flags --toolsJar and --useJasper have been removed.
  Support HTTP/2 without the use of a custom --extraLibFolder option. pull 7117 , JENKINS-69624 , pull 7277 , JENKINS-69509 , Winstone 6.0 changelog , Winstone 6.1 changelog , Winstone 6.2 changelog , Winstone 6.3 changelog , Winstone 6.4 changelog , Winstone 6.5 changelog , Winstone 6.6 changelog , Jetty 10 and 11 blog post , Jetty 10.0.12 changelog , HTTPS with an existing certificate , Remove ability to load pem cert for winstone Add sidebar to plugin manager, increase search bar size. pull 6783 Add support for Apple's touch bar icons. pull 6768 Removed: The signed jenkins-parent-${JENKINS_VERSION}-src.zip source archives have been removed from Artifactory for future releases.
  Users who wish to download source archives for offline consumption are encouraged to do so via GitHub. pull 7061 , Artifactory , GitHub source code download Display email form validation errors near the data entry field in the setup form. JENKINS-68952 Show recommended actions (e.g., to update affected plugins) in security warnings popup. pull 7046 Clarify safe restart won't wait for Pipeline jobs. pull 7091 Allow form checker to check more than one thing at a time. pull 6951 Add documentation for the --paramsFromStdIn and --version command-line options. pull 7246 Bug fix Fix sorting of British currency in tables. pull 7250 Improve build progress animation when refreshing parts of the history/executors widget. JENKINS-68627 Fix the resize behavior of Execute Shell build steps. JENKINS-69320 Fix searchBar is  issue in setup wizard and when using custom Jenkins headers. JENKINS-69250 Ensure that temporary network partitions do not cancel the WebSocket ping thread (regression in 2.363). pull 7195 2.361.4 November 13, 2022 Major bug fix Prevent a stack overflow when loading a queue (regression in 2.361). JENKINS-69850 2.361.3 November 2, 2022 Major bug fix Fix a race condition that causes file descriptor leaks when cloud agents are created (regression in 2.294). JENKINS-69534 Bug fix Model link chevron is not in center in user build cause on console log. JENKINS-69257 Table columns get wider or smaller depending on the sort selection. JENKINS-67864 2.361.2 October 5, 2022 Major bug fix Fix thread safety in websockets handling. JENKINS-69543 Bug fix Fix the resize behavior of Execute Shell build steps (regression in 2.321 or 2.357). JENKINS-69320 Fix a potential FileAlreadyExistsException error on startup on systems with slow I/O. JENKINS-67624 Fix Plugin Manager selection buttons appearance. JENKINS-69467 Fix Java version check in /etc/init.d/jenkins . JENKINS-69570 Properly reset attributes of cached symbols. JENKINS-68805 2.361.1 September 7, 2022 Changes since 2.361 Security Important security fix. 2022-09-09 security advisory Major enhancement Winstone 6.1: Upgrade Jetty from 9.4.46.v20220331 to 10.0.11.
  Remove support for OpenSSL-style PEM-encoded RSA private keys when running Jenkins with the embedded Jetty container and TLS. Winstone 6.0 Changelog , Winstone 6.1 Changelog , Jetty blog , Remove ability to load pem cert for winstone Update to various UI elements.
  Modernize tables, forms, and progress bars. pull 6963 , JENKINS-69240 , pull 6961 , JENKINS-69230 , pull 6957 , JENKINS-69211 , pull 6930 , JENKINS-68957 , pull 6728 , JENKINS-68578 , pull 6922 , JENKINS-68851 Major bug fix Fix an error when rebuilding jobs triggered by polling (regression in 2.358). JENKINS-69210 Update Jenkins pom from 1.83 to 1.84.
  Ensure jar files and javadoc are up to date for 2.361.1. JENKINS-69198 Bug fix Upgrade Remoting from 3025.vf64a_a_3da_6b_55 to 3044.vb_940a_a_e4f72e to improve performance of previous fix for java.lang.OutOfMemoryError: unable to create new native thread on agents. pull 6936 , JENKINS-65873 , JENKINS-68954 , Remoting 3028.va_a_436db_35078 changelog , Remoting 3044.vb_940a_a_e4f72e changelog Use correct icon lookup, even when plugin ID includes multiple occurrences of "plugin". JENKINS-68801 Fix sorting list of installed plugins by timestamp in plugin manager (regression in 2.274). JENKINS-68750 Build number cut off on Safari (regression in 2.344). JENKINS-68390 Script console input box is not sizeable, yet the box looks like it is (regression in 2.321). JENKINS-68380 Developer: Temporarily restore compatibility with PowerMock-based tests (regression in 2.361.1 RC 1).
  PowerMock will be completely removed on or after June 1, 2023. JENKINS-69250 Notable changes since 2.346.3 Major enhancement Require Java 11 or newer. Blog post , JENKINS-68570 , JEP-236 , pull 6083 New design for project configuration page.
  Navigation links available on left side of screen. JENKINS-68282 Update to various UI elements.
  Modernize tables, forms, and progress bars. pull 6760 , JENKINS-68912 , pull 6698 , JENKINS-68934 , pull 6687 , JENKINS-68198 , pull 6651 , JENKINS-68672 Enhancement The instance-identity module has been converted to a detached plugin. JENKINS-55582 Update the minimum required Remoting version to 4.2.1. pull 6671 Keyboard shortcut added to focus global search bar (⌘ + K/CTRL + K). pull 6893 Blocked upstream projects in the queue block downstream projects when the option "Block build when upstream project is building" is enabled for the downstream project.
  Similarly, blocked downstream projects in the queue block upstream projects when the option "Block build when downstream project is building" is enabled for the upstream project. JENKINS-68780 Add breadcrumbs to "Manage Jenkins" and children of it.
  Developers should ensure they use relative links for navigating between pages if they are a child of "Manage Jenkins". pull 6126 Use native Java Platform functionality rather than Ant to load classes.
  The old behavior can be restored by setting -Dhudson.ClassicPluginStrategy.useAntClassLoader=true . pull 6571 Remove Java Web Start support for launching inbound agents, along with the GUI mode, the platform-specific agent installers, and the JAR signature. pull 6543 , Java Web Start Bug fix Connect breadcrumb context menus to items in subfolders. JENKINS-68906 Fix websocket reconnection in edge cases.
  Upgrade from Remoting 4.13 to 3044.vb_940a_a_e4f72e. pull 6576 , JENKINS-68542 , Remoting 3025.vf64a_a_3da_6b_55 changelog , Remoting 3028.va_a_436db_35078 changelog , Remoting 3044.vb_940a_a_e4f72e changelog Revert prior attempts to make log records collectible by limiting discarded messages. JENKINS-68417 2.346.3 August 10, 2022 Enhancement Upgrade Spring Framework from 5.3.19 to 5.3.20. pull 6565 , Spring Framework 5.3.20 changelog , CVE-2022-22970 , CVE-2022-22971 Bug fix Revert prior attempts to make log records collectible by limiting discarded messages. JENKINS-68417 Connect breadcrumb context menus to items in subfolders. JENKINS-68906 Improve progress bar visibility in shaded rows. JENKINS-68672 Update Remoting from 4.13.2 to 4.13.3 to improve performance of previous fix for java.lang.OutOfMemoryError: unable to create new native thread on agents. JENKINS-65873 2.346.2 July 13, 2022 Enhancement Remove deprecated Docker plugin installation script install-plugins.sh .
  Use plugin installation manager tool through the jenkins-plugin-cli script in the Docker image. Docker pull request 1408 , Plugin installation manager tool documentation Bug fix Ignore duplicate log recorders keyed by same name. JENKINS-68752 Display job icons correctly on the Jenkins dashboard, even when a non-empty context path alters the URL (regression in 2.346.1). JENKINS-68639 Show all log messages when an inbound agent fails to connect (regression in 2.310). JENKINS-68785 Plugins selected for update cannot be unselected once the update has started. JENKINS-68730 Fix offset of radio buttons when selected. JENKINS-68799 Make previous boot attempt timestamps available to boot-failure.groovy startup hooks (regression in 2.308). JENKINS-68848 2.346.1 June 22, 2022 Changes since 2.346 Security Important security fixes. security advisory Enhancement Remove SSH Plugin from setup wizard plugin selection. JENKINS-68556 Allow running on Java 17 without --enable-future-java . pull 6602 Show remote class loader statistics of agents with new table layout. JENKINS-68591 Update bundled Script Security Plugin from 1.75 to v35f6a_0b_8207e
  Update bundled WMI Windows Agents Plugin from 1.0 to 1.8.1 pull 6582 , 2022-05-17 security advisory Bug fix Fix indistinguishable build scheduling icon when the job is already in-queue (regression in 2.321). JENKINS-68303 Fix the position of the help button when it is not directly attached to an object (regression in 2.320). JENKINS-68042 Restore actions icon size lookup (regression in 2.341). JENKINS-68296 Fix a runtime error when viewing the build time trend on Java 17. JENKINS-68215 Provide supporting infrastructure to enable Pipeline: Groovy to work around a metaspace memory leak for users running Pipeline jobs on Java 11. pull 6597 , JENKINS-63766 , JDK-8231454 metaspace leak Restore the frame color of the build progress bar of the executor widget. pull 6607 Keep the Save and Apply buttons in front of menus (regression in 2.337). JENKINS-68640 Fix WebSocket reconnection in edge cases.
  Upgrade from Remoting 4.13 to 4.13.2. pull 6576 , JENKINS-68542 , Remoting 4.13.2 changelog Fix class attribute for Jenkins Symbols using <l:icon … /> . JENKINS-68630 Notable changes since 2.332.4 Major enhancement Modernise form components and Jenkins UI. JENKINS-67396 , pull 6084 , pull 6442 , JENKINS-68293 , pull 5743 , JENKINS-68284 , pull 6473 , pull 6295 , pull 6273 , pull 6229 , pull 6307 , pull 5778 , pull 6248 , pull 5417 , pull 6186 Major bug fix Update Remoting from 4.11.2 to 4.13 to allow Java Web Start agents to connect (regression in 2.318).
  Allow agent reconnects on Java 11 and WebSocket.
  Prevent infinite loop in case of a closed SSL connection. pull 5983 , pull 6329 , JENKINS-67000 , JENKINS-66446 , JENKINS-67928 , Remoting 4.12 changelog , Remoting 4.13 changelog Enhancement Reject connections from agents with unsupported Remoting versions. JENKINS-50211 Update site warnings can now be configured with Configuration as Code.
  Allow setting a user's primary view via Configuration as Code. pull 6202 , JENKINS-56057 , pull 6203 , JENKINS-61985 Remove support for RoleChecker#check(RoleSensitive) calls which were added again in Jenkins 2.319.
  All remoting Callable implementations need to perform an actual role check as documented. pull 5901 , Remoting callables documentation Remove the Java Native Runtime (JNR) library from Jenkins core. pull 6323 , Java Native Runtime project Remove unused glibc package from Alpine-based Docker images. Docker pull request 1361 Remove unnecessary packages from Debian-based Docker images. Docker pull request 1375 Winstone 5.24 - Add an option to write the listening port to a file.
  Remove automatic self-signed certificate if TLS is specified but no keystore pull 5928 , JENKINS-66379 , Winstone 5.23 changelog , Winstone 5.24 changelog Add slim Debian-based JDK 17 Docker image. Docker pull request 1360 Add Alpine-based JDK 17 Docker image. Docker pull request 1362 Bug fix Render the question mark on the new help button only once so that it is not shown twice, even while using different themes. pull 6233 Wait for the computation to finish when triggering a new build while the build graph is being recomputed.
  This guarantees that recently updated build triggers are executed. JENKINS-67237 2.332.4 June 22, 2022 Security Important security fixes. security advisory Enhancement Remove SSH Plugin from setup wizard plugin selection. JENKINS-68556 2.332.3 May 4, 2022 Major bug fix Avoid a deadlock between agent class loading and logging. JENKINS-68122 Enhancement Replace the computer-flash GIF icon with the hourglass icon. JENKINS-67742 Make "View build information" pages readonly for users who don't have permission. JENKINS-67967 Upgrade bundled Jackson 2 API plugin from 2.12.0 to 2.13.2.20220328-273.v11d70a_b_a_1a_52. JENKINS-68276 , pull 6480 , Jackson 2 API plugin changelogs Bug fix Allow filtering updates in plugin manager by plugin ID (regression in 2.320). JENKINS-68260 Display log entries with missing logger names in the log viewer. pull 6310 Preserve load statistics data for label expressions. JENKINS-68055 Fix bad encoding of security warnings in French showing special characters. pull 6382 2.332.2 April 6, 2022 Enhancement Show warning dialog if Java 8 is selected in Windows installer. JENKINS-68170 , pull 306 (packaging) Bug fix Prefer --httpPort from JENKINS_ARGS over HTTP_PORT when the two differ. JENKINS-68007 , pull 296 (packaging) Remove unnecessary log spam when starting Jenkins under systemd on Debian 11 (regression in 2.333 and 2.332.1). JENKINS-67995 Don't show build status on jobs that are not yet built (regression in 2.321). JENKINS-67797 Ensure inbound agent restart logic is applied. JENKINS-66446 Recover gracefully after incorrect merge of /etc/sysconfig/jenkins on Red Hat-based systems. JENKINS-68149 , pull 301 (packaging) 2.332.1 March 9, 2022 Changes since 2.332 Enhancement Switch Linux installers from System V init to systemd. JENKINS-41218 Update the bundled Matrix Project plugin from 1.18 to 1.20. pull 6180 , JENKINS-67674 , 2022-01-12 security advisory Update bundled Display URL API plugin to prevent issues starting the mailer plugin for offline installations. JENKINS-67885 Bug fix Keep the same height when dragging and dropping a component (regression in 2.277). JENKINS-67496 Correctly render expandable text boxes into multiple lines (regression in 2.197 and 2.176.4). JENKINS-67627 Show correct feature name in tooltips of help links (regression in 2.179). JENKINS-67662 Launch only one agent to satisfy cloud agent requests that use label expressions. JENKINS-67635 Truncate long build names again (regression in 2.332). JENKINS-67689 Overwrite grey balls icon with the modern "not built" status. JENKINS-67753 Render the question mark on the new help button only once so that it is not shown twice, even while using different themes. pull 6233 Update remoting from 4.11 to 4.12 to allow Java web start agents to connect (regression in 2.318). pull 5983 , JENKINS-67000 , Remoting 4.11.2 changelog , Remoting 4.12 changelog Restart systemd service when the controller exits unexpectedly. JENKINS-56219 Restart the Jenkins service after plugin updates on Debian 11 (bullseye). JENKINS-65809 Notable changes since 2.319.3 Major enhancement Always enable the agent-to-controller security subsystem.
  Remove the admin-customizable allowlists for callables and file paths.
  Remove the ability to access some files on the controller from agents.
  Use the Plugin Manager to upgrade incompatible plugins. pull 5885 , JENKINS-67173 , the issue tracker Upgrade the Guava library from 11.0.1 (released on January 9, 2012) to 31.0.1 (released on September 27, 2021).
  Plugins have already been prepared to support the new version of Guava.
  Use the Plugin Manager to upgrade all plugins before and after upgrading Jenkins. pull 5707 , JENKINS-36779 , JEP-233 , Guava web site , Guava 31.0.1 changelog Enhancement Modernise the table design.
  Add support for Ionicons.
  Improve the usability and layout of the 'Plugin Manager' page with better controls and a 'Report an issue' link for each plugin.
  Update the 'New view', 'New node', 'About', 'System Info', and 'Log Recorder' pages. pull 5851 , pull 5925 , pull 5842 , pull 6055 , pull 5916 , pull 5358 , JENKINS-65113 Allow the plugin manager to upload by URL in addition to upload by file name. JENKINS-4814 Improve visualization of the 'Environment Variables' page. pull 6096 Improve artifact list readability in dark theme. pull 5889 Use CSS animation for console progress. pull 5871 Remove support for plugins written in JRuby or Jython.
  JRuby support has been removed from the Stapler web framework used in Jenkins core.
  Plugins written in JRuby and Jython have not been distributed by update center since January 22, 2022. pull 6103 , JEP-7: Deprecation of Ruby and Python plugin runtimes , Deprecating non-Java plugins (blog post) , Stapler repository , JRuby project Remove support for setting the Jenkins home directory via Java Naming and Directory Interface (JNDI). pull 6111 Developer: Provide a stable version of ObjectWebASM (currently 9.1) on the classpath. pull 5524 , ObjectWebASM web site Developer: Use the upstream version of AntClassLoader without custom patches. pull 5856 2.319.3 February 9, 2022 Security Security fix. security advisory Bug fix Fix ClassNotFoundException: io.jenkins.cli.shaded.org.w3c.dom.Node when using JAXB. JENKINS-67470 Launch only one agent to satisfy cloud agent requests that use label expressions. JENKINS-67635 Enhancement Upgrade the XStream library from 1.4.18 to 1.4.19.
  Addresses the CVE-2021-43859 security vulnerability when unmarshalling highly recursive collections or maps causing a Denial of Service. pull 6231 , XStream 1.4.19 changelog , XStream CVE-2021-43859 2.319.2 January 12, 2022 Security Security fix. security advisory Enhancement Only apply trimLabels operation to affected nodes when adding or removing them. JENKINS-67099 Improve FilePath telemetry collection and its description. JENKINS-67332 , JENKINS-67226 , pull 5957 , pull 6031 , pull 6061 2.319.1 December 1, 2021 Changes since 2.319 Bug fix Do not attempt to canonicalize tar entries when untaring, as the result may be unexpected for symlinks. JENKINS-67063 Fix form submission for file access rules of agent to controller security subsystem (regression in 2.111). pull 5881 , JENKINS-67061 , Upgrade guide - Agent to controller path filter security fixes Fix missing hyperlink in build history (regression in 2.314). JENKINS-67028 An exception thrown by a RestartListener no longer leaves Jenkins in a zombie-like state. JENKINS-67002 Prevent LinkageError during class loading (regression in 2.309). JENKINS-66993 Show ongoing first build in build history (regression in 2.314). JENKINS-66969 Jenkins startup could hang due to a deadlock in class loading. JENKINS-67188 Display the "Configure System" icon in the drop down menu. JENKINS-67033 Notable changes since 2.303.3 Major enhancement Replace the term "master" for the main Jenkins application with "controller" or "built-in node" in user interface strings and documentation.
  New installations get the new node and label immediately.
  Existing installations do not change the node name (e.g. NODE_NAME environment variable) or label of the built-in node until an administrator explicitly performs the migration.
  If a job definition, Pipeline definition, or tool installer reference must be tied to the built-in node, it should use the label " built-in ". Upgrade guide - Built-In Node Name and Label Migration Enhancement Modernise the "Manage Jenkins" screen. pull 5693 Modernise the "Build History" search bar. pull 5692 Update appearance for feed bar and description button to be modern and consistent. pull 5664 Improve layout of console output header. pull 5507 Show new status icons in build history. JENKINS-66659 Update tooltips to be consistent across Jenkins. pull 5763 Use SVGs over PNGs for the sidebar when possible.
  Breadcrumb bar/logo/menu items are now correctly aligned on the left together.
  Move old war/images folder to webapp so they can be used in frontend - the SVGs are now in the webapp/images/svgs folder. pull 5663 Replace the old icons with the new SVG icons in the job trend page. JENKINS-65928 Graphs now scale correctly on high resolution screens. pull 5697 Screen resolution cookie now has the secure flag set when Jenkins is running on HTTPS. JENKINS-49675 Deprecate the -cp option in the remoting agent.jar command line.
  Upgrade from Remoting 4.10 to Remoting 4.11. pull 5821 , JENKINS-64831 , Remoting 4.11 changelog When the buildWithParameter API is called, if the requests with the same parameters in the queue are merged, the http response code of the request uses a more appropriate 303(see other) instead of 201(created). JENKINS-66105 Remove deprecated, unsafe classes previously copied from Apache Ant. Docker Slaves plugin is incompatible with this change. JENKINS-66930 Load classes from plugins in parallel for faster startup on multicore machines. JENKINS-23784 Remove the Woodstox implementation of the StAX API from Jenkins core.
  Users of the Azure Artifact Manager, Azure Container Agents, Azure Storage, and Azure SDK API plugins must upgrade those plugins to the latest versions in lockstep with this core upgrade.
  Plugins that consume Woodstox should depend on it directly or via the Jackson 2 API plugin. pull 5651 , Woodstox implementation , StAX API , Azure Artifact Manager plugin , Azure Container Agents plugin , Azure Storage plugin , Azure SDK API plugin , Jackson 2 API plugin Internal: Experimental support for URLClassLoader can be enabled by setting hudson.ClassicPluginStrategy.useAntClassLoader=false . pull 5698 Bug fix Fix wrong parameter type for Text Parameter when triggering a build via the buildWithParameters API call. pull 5704 Use the JVM's default keystore type for the Jenkins server when terminating TLS connections within Jenkins.
  Used if Jenkins is started with the --httpsPort argument.
  Winstone 5.21: Update Jetty from 9.4.42.v20210604 to Jetty 9.4.43.v20210629. pull 5670 , JENKINS-66379 , Winstone 5.20 changelog , Winstone 5.21 changelog , Jetty 9.4.43 changelog Correction of label expression including a "implies" relationship without spaces around. JENKINS-66613 Fix agent handshake when connecting over Websocket on Java 11.
  Upgrade from Remoting 4.10 to Remoting 4.11. pull 5821 , JENKINS-61212 , Remoting 4.11 changelog 2.303.3 November 4, 2021 Security Important security fixes. security advisory Major enhancement Security hardening: Require role check for remoting callables. LTS upgrade guide , developer documentation Enhancement Always allow configuring agent-to-controller security subsystem. Bug fix Correction of Label expression including a "implies" relationship without spaces around. JENKINS-66613 2.303.2 October 6, 2021 Security Security fixes. security advisory Enhancement Security hardening: The "short description" of build causes is now defined as plain text instead of HTML. related LTS upgrade guide entry , related developer documentation Bump bundled Ant from 1.10.10 to 1.10.11. pull 5620 Upgrade from xstream 1.4.17 to 1.4.18. pull 5685 , JENKINS-66507 , XStream 1.4.18 Bug fix Allow Jenkins to start when the JCasC configuration defines view-related permissions (regression in 2.302). JENKINS-66470 Use the JVM's default keystore type for the Jenkins server when terminating TLS connections within Jenkins.
  Used if Jenkins is started with the --httpsPort argument.
  Winstone 5.21: Update Jetty from 9.4.42.v20210604 to Jetty 9.4.43.v20210629. pull 5670 , JENKINS-66379 , Winstone 5.20 changelog , Winstone 5.21 changelog , Jetty 9.4.43 changelog Fix wrong parameter type for Text Parameter when triggering a build via the buildWithParameters API call. pull 5704 2.303.1 August 25, 2021 Changes since 2.303 Bug fix Fix an issue unzipping archives in a corner case when entries have the same path prefix as the target location. JENKINS-66094 Detect files in a symlink that points to a directory (regression in 2.301).
  Bump Commons IO to 2.11.0. pull 5675 , JENKINS-66413 , Apache Commons-IO issue 741 Show tooltips when users hover on the SVG icons. JENKINS-65923 Enhancement Use Java 11 in Docker images instead of Java 8. Blog post Allow Java 11 administrative monitor to be disabled with a system property. JENKINS-66177 Notable changes since 2.289.3 Major bug fix Fix SSH command line interface (CLI) authentication (regression in 2.284). JENKINS-65273 Fix NoSuchMethodError when using plugins that rely on bridge methods for compatibility (regression in 2.278). JENKINS-65605 Major enhancement Remove Apache Commons Digester library and related code from the Jenkins core. pull 5320 , JENKINS-65161 , Announcement and upgrade guidelines Bug fix Jenkins redirects users to the previous page after login even if they were able to view it while not logged in (regression in 2.266). JENKINS-64991 Improve contrast for the checkbox in the login page. pull 5536 Enhancement Recommend running on Java 11. JENKINS-65577 Display Pipeline builds among user build history and remove incorrect warning about view build history. JENKINS-59412 Show implied plugin dependencies or a count of dependencies for plugins split from core. pull 5472 Explain that some plugin updates can be unavailable even on the latest version of a given release line (i.e. LTS). pull 5462 Update French terminology for controller. JENKINS-65398 Change the word 'number' to 'integer' in the error message of the number field. pull 5538 The Jenkins process management functionality now supports FreeBSD. pull 5563 Optimize access control checks affecting (at least) Pipeline node steps. pull 5586 Remove JEP-200 compatibility workarounds for releases published before February 2018 of the following plugins: Maven Integration, Job DSL, Monitoring, Git Client, Pipeline: Supporting APIs, OWASP Dependency-Check. pull 5454 , Plugin versions with a fix , JEP-200 Update Stapler from 1.263 to 1563.v3da2d02f9572 to improve performance when encoding unicode characters in JSON API. pull 5422 , Stapler 1527.ve41b3ce15c05 changelog , Stapler 1532.vfcf95addcb5f changelog , pull 5549 , Stapler 1539.v2f05ce93882d changelog , Stapler 1563.v3da2d02f9572 changelog Stop bundling the External Monitor Job Type, LDAP, and PAM Authentication plugins.
  Jenkins will no longer automatically install the External Monitor Job Type, LDAP, or PAM Authentication plugins on startup if a plugin depending on Jenkins 1.467 or earlier is discovered.
  If you use such a plugin that also relies on the functionality provided by the External Monitor Job Type, LDAP, or PAM Authentication plugin and manage plugins outside Jenkins' plugin manager, you will now need to ensure that a recent release of the External Monitor Job Type, LDAP, or PAM Authentication plugin is installed.
  Jenkins will attempt to load such plugins but may fail at any time during startup or afterwards with ClassNotFoundException or similar. pull 5445 , External Monitor Job Type plugin , LDAP plugin , PAM Authentication plugin Winstone 5.19: Update Jetty from 9.4.41.v20210516 to Jetty 9.4.42.v20210604. pull 5589 , Winstone 5.19 changelog , Jetty 9.4.42 changelog Bump spring-security-bom from 5.4.6 to 5.5.1. pull 5505 , Spring project spring-security 5.5.0 release notes , pull 5598 , Spring project spring-security 5.5.1 release notes Bump sshd-core from 2.5.1 to 2.7.0 in Jenkins CLI. pull 5547 Add X-Frame-Options header to AJAX responses. pull 5555 Remove the Bytecode Compatibility Transformer library and related code from Jenkins core.
  Developer: Plugins that rely on the hudson.model.Queue$Item#id or hudson.model.AbstractProject#triggers fields must be updated to call the corresponding getters. pull 5526 , Vertx plugin , Slave Prerequisites plugin Stop sending HTTP response headers related to the remoting-based CLI (removed in 2.165). pull 5452 Internal: Upgrade from Remoting 4.7 to Remoting 4.10 with bugfixes and dependency updates. pull 5478 , JENKINS-40700 , Remoting 4.8 changelog , pull 5539 , Remoting 4.9 changelog , pull 5607 , Remoting 4.10 changelog Developer: Remove JTidy dependency from Jenkins core.
  Plugins that use JTidy functionality must be updated to explicitly declare a dependency on JTidy rather than relying on Jenkins core to provide this library. pull 5521 , NIS notification lamp plugin Developer: InterceptingExecutorService and its subclasses no longer extend com.google.common.util.concurrent.ForwardingExecutorService or com.google.common.collect.ForwardingObject . pull 5565 Developer: Remove jna-posix dependency from Jenkins core.
  Plugins that use jna-posix functionality must be migrated from jna-posix to jnr-posix . pull 5560 , Maven Repository Scheduled Cleanup plugin , SICCI for Xcode plugin , java.io.tmpdir cleaner plugin Developer: The hudson.util.SubClassGenerator and experimental hudson.model.TreeView class have been removed without replacement. pull 5566 , pull 5603 2.289.3 July 28, 2021 Bug fix Improve build status progress animation. JENKINS-65574 2.289.2 June 30, 2021 Security Important security fixes. security advisory Enhancement Winstone 5.18: Update Jetty from 9.4.39.v20210325 to 9.4.41.v20210516 for bug fixes and enhancements. JENKINS-65624 , pull 5437 , pull 5540 , Winstone 5.17 changelog , Winstone 5.18 changelog , Jetty 9.4.40 changelog , Jetty 9.4.41 changelog Update from xstream 1.4.16 to 1.4.17. pull 5498 , JENKINS-65657 , XStream 1.4.17 Bug fix Prepare for form submission changes in future Firefox releases.
  Adapt form validation for all web browsers and form validation test automation for HtmlUnit based tests. JENKINS-65585 , pull 5479 , pull 5405 A race condition in class loading could result in a LinkageError . JENKINS-65766 Do not change fonts when build artifacts are as shown as a tree. JENKINS-65751 Jenkins redirects users to the previous page after login even if they were able to view it while not logged in (regression in 2.266). JENKINS-64991 Fix incorrect process termination issues when running on macOS. JENKINS-65195 Add check to prevent out of bounds memory access error on macOS. JENKINS-64347 2.289.1 June 2, 2021 Changes since 2.289 Major bug fix Fix NoSuchMethodError when using plugins that rely on bridge methods for compatibility (regression in 2.278). JENKINS-65605 Bug fix Fix form submission for some specific form validation cases (regression in 2.289). JENKINS-65585 Wrap the build name in the build results list if it is too long. JENKINS-65190 Improve performance for standard input of the Jenkins CLI, for example with the `install-plugin` command. JENKINS-64294 Fix an issue archiving files greater than 4 GiB in size when creating ZIP64 archives. JENKINS-52356 Notable changes since 2.277.4 Major enhancement SSHD module is no longer bundled in Jenkins core.
  Provide SSHD as a plugin. JENKINS-55582 , JENKINS-64107 , pull 5049 , pull 5206 , SSHD module repository Add modern icons: build status and weather. pull 5065 , pull 5392 Developer: Add support for plugins to use external SVG sprites in their icons. pull 5065 , Example external SVG sprite implementation in GitHub Branch Source plugin Enhancement Add administrative monitors recommending no executors are configured on the controller. pull 5337 Add indicator for security-related entries in the global administrative monitors configuration. pull 5078 Improve UI of slow trigger administrative monitor. pull 5424 Support 'min' and 'max' values in field definitions of forms. JENKINS-63855 Improve button focus states. pull 5291 Do not force plugin upgrades of recently detached plugins. pull 5311 Stop bundling the Ant and Javadoc plugins.
  Jenkins will no longer automatically install the Ant and Javadoc plugins on startup if a plugin depending on Jenkins 1.430 or earlier is discovered.
  If you use such a plugin that also relies on the functionality provided by the Ant or Javadoc plugin (e.g., the RAD Builder and manage plugins outside the Jenkins plugin manager, you will now need to ensure that a recent release of the Ant or Javadoc plugin is installed.
  Jenkins will attempt to load such plugins but may fail at any time during startup or afterwards with ClassNotFoundException or similar. pull 5338 , Ant plugin , Javadoc plugin , RAD Builder plugin Improve performance when creating or deleting nodes by reducing queue-lock contention. pull 5402 , pull 5412 , JENKINS-65308 Improve support for update site-defined setup wizard suggestions. JENKINS-65172 Switch to sending POST requests by default for form validation URLs. pull 4623 Add a Jenkins User-Agent header to outgoing HTTP requests by default.
  Use jenkins.UserAgentURLConnectionDecorator.disabled to disable it if needed. pull 5368 Remove the hardcoded JKS key store so that other key stores can be used, like BCFKS from the FIPS version of Bouncy Castle. pull 5266 Upgrade from Remoting 4.6 to Remoting 4.7 with bugfixes and dependency updates. pull 5292 , Remoting 4.7 changelog Upgrade bouncycastle-api plugin from 2.16.0 to 2.20.
  Upgrade Bouncy Castle library to 1.64. pull 5347 , bouncycastle-api 2.20 changelog , bouncycastle-api 2.18 changelog , bouncycastle-api 2.17 changelog , bouncycastle-api 2.16.3 changelog , bouncycastle-api 2.16.2 changelog , bouncycastle-api 2.16.1 changelog , Bouncy Castle library 1.64 release notes Bump spring-security-bom from 5.4.5 to 5.4.6. pull 5413 , Spring project spring-security 5.4.6 release notes Internal: Update Stapler from 1.262.1 to 1.263 to use latest Apache commons-beanutils.
  Update Apache commons-beanutils from 1.9.3 to 1.9.4. pull 5324 , Stapler 1.263 release notes , Apache commons beanutils 1.9.4 release notes Bug fix Sort available plugins by name when popularity is equal. pull 5359 Honor the current folder when creating new views with the "New View" link. JENKINS-56934 Do not render full error responses in case of internal errors when validating fields in configuration forms. JENKINS-65017 Accept negative numbers in number input controls (regression in 2.274). pull 5341 Improve reconnection behavior for inbound TCP agents. JENKINS-64510 2.277.4 May 5, 2021 Bug fix Fix disabled dropdown items to appear disabled (regression in 2.277.1). JENKINS-65021 Fix load statistics graph links to include correct graph duration (regression in 2.277.1). JENKINS-65336 Honor the current folder when creating new views with the "New View" link. JENKINS-56934 Enhancement Upgrade from xstream 1.4.15 to 1.4.16. pull 5360 , JENKINS-65281 , XStream 1.4.16 2.277.3 April 20, 2021 Security Important security fix. security advisory Enhancement Winstone 5.16: Update Jetty from 9.4.38.v20210224 to 9.4.39.v20210325 for bug fixes and enhancements. pull 5380 , Winstone 5.16 changelog , Jetty 9.4.39.v20210325 changelog 2.277.2 April 7, 2021 Security Security fixes. security advisory Major bug fix Fix help buttons in the draggable section (regression in 2.277.1). JENKINS-64972 Enhancement Security hardening against some CSRF attacks. related upgrade guide entry Bug fix Fix NoClassDefFoundError exception while executing ProcessTree.get() . JENKINS-62006 Prevent Jenkins queue deadlock when cancelling tasks under certain conditions. JENKINS-64931 Reduce logging of renamed API endpoint. JENKINS-65186 2.277.1 March 10, 2021 As described in the Major changes in the weekly release line blog post, this release improves key user interface components. Configuration user interfaces now use html div markup to present a better layout than the previous html table layout. Configuration pages are now easier to read, easier to understand, and work better on a wide range of screens. See the J