Page 39

• Jenkins community account password audit

  Last year, news of compromised passwords being used for accounts able to distribute NPM packages made the rounds. Their system looks similar to how publishing of plugins works in the Jenkins project: Accounts are protected by passwords chosen by users. Individual contributors have permission to release the components they maintain. The components they release are used by millions of developers around the world to...

  Daniel Beck March 19, 2018
• Introducing Jenkins X: a CI/CD solution for modern cloud applications on Kubernetes

  We are excited to share and invite the community to join us on a project we’ve been thinking about over the last few months called Jenkins X which extends the Jenkins ecosystem to solve the problem of automating CI/CD in the cloud. Background The last few years have seen massive changes in the software industry: use of immutable container images for distributing software...

  

  James Strachan March 19, 2018
• Security hardening: Jenkins LTS 2.107.1 switches XStream / Remoting blacklists to whitelists (JEP-200)

  This is a post about a major change in Jenkins, which is available starting from Jenkins 2.102 and Jenkins LTS 2.107.1. This is a change with a serious risk of regressions in plugins. If you are a Jenkins administrator, please read this blogpost and upgrade guidelines BEFORE upgrading. I would like to provide some heads-up about the JEP-200 change, which is included into the new Jenkins LTS 2.107.x...

  

  Oleg Nenashev March 15, 2018
• Browser Market Share on jenkins.io

  Over the last year, several efforts were done on jenkins.io like security advisories or documentation and I wanted to understand the impact it had on its traffic. I had a look to the Google Analytics account used for jenkins.io and it was interesting to discover which browsers are used by Jenkins visitors and how this compares with other websites. So I decided to analyze one...

  

  Olivier Vernin March 12, 2018
• 5 tips for improving your Jenkins World 2018 talk proposals

  You’ve marked your calendar to alert you weeks in advance of the CFP deadline. You’ve spent your nights and weekends to skillfully craft your abstract and you are convinced this is THE one. You confidently clicked the 'submit' button only to find out weeks later you’ve received an automated declined email. On top of feeling disappointed, you probably wondered why your proposal was...

  

  Alyssa Tong March 5, 2018
• Project Cheetah - Faster, Leaner Pipeline That Can Keep Up With Demand

  Table of Contents Introducing "Project Cheetah" Yes, but what does it DO? How Do I Set Speed/Durability Settings? 1. Globally, you can choose a global default durability setting: 2. Each Pipeline can get a custom Durability Setting: 3. Multibranch Projects can use a new BranchProperty to customize the Durability Setting. Will Performance-Optimized Mode Help Me? Other Goodies How Did You Do It? What Next? Since it launched, Pipeline has had a...

  Sam Van Oort February 22, 2018
• Jenkins is accepted to Google Summer Of Code 2018, join us!

  We are happy to announce that Jenkins project has been accepted to Google Summer of Code 2018. This year we invite students and mentors to join the Jenkins community and work together on various initiatives: core, plugins, development tools and infrastructure. Our mentors have already created some project ideas. For example, you are welcome to work on the new Configuration-as-Code initiative or to help creating standard...

  

  Oleg Nenashev February 19, 2018
• Security updates for Jenkins core

  We just released security updates to Jenkins, versions 2.107 and 2.89.4, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. While the severity score works out as medium for all the vulnerabilities, we strongly recommend that anyone...

  Daniel Beck February 14, 2018
• Security updates for multiple Jenkins plugins

  Multiple Jenkins plugins received updates today that fix several security vulnerabilities. Android Lint CCM Credentials Binding JUnit Pipeline: Supporting APIs For an overview of these security fixes, see the security advisory. Subscribe to the jenkinsci-advisories mailing list to receive important future notifications related to Jenkins security....

  Daniel Beck February 5, 2018