Page 63

• Mitigating unauthenticated remote code execution 0-day in Jenkins CLI

  Updated 2015-11-11 15:00 UTC: We have released Jenkins 1.638 and 1.625.2 which contain a fix for this vulnerability. See the security advisory for more information about these releases. Updated 2015-11-06 03:55 UTC: Included a updated mitigation script which doesn’t have a Jenkins boot race condition Earlier today we received numerous reports about a previously undisclosed "zero day" critical remote code execution vulnerability...

  

  R. Tyler Croy November 6, 2015
• What JVM versions are running Jenkins?

  Preceding some of last week’s Jenkins 2.0 discussions, there had been some threads on whether we should move Jenkins to require Java 8. The introduction of Java 8 last year brought performance improvements and highly desirable API changes, which make developing Java-based applications (arguably) much easier than before. The release was followed earlier this year by the end-of-life announcement for...

  

  R. Tyler Croy November 3, 2015
• Adopt a plugin!

  With more than a thousand public plugins in the Jenkins community now, it should come as no surprise that some of them are no longer actively maintained. Plugin authors move on when they change jobs, or lose interest in the plugin, and that’s fine. Plugins are hosted on the Jenkins project infrastructure after all, and when a maintainer moves on,...

  Daniel Beck November 1, 2015
• Jenkins 2.0 Proposal: Improved "Out of the box" user experience

  This week we have featured a number of proposals for what we would like to see in "Jenkins 2.0", the vision of which is to make Jenkins users more efficient, productive and happy. We started with some more internally facing changes and have slowly progressed from the "inside-out" to today’s topic: improving the out of the box user experience. That is...

  

  R. Tyler Croy October 30, 2015
• Jenkins 2.0 Proposal: UX Improvements (Part One)

  We have been featuring a few proposals this week for what "Jenkins 2.0" is going to include. Today we’ll be diving into the most noticeable changes being proposed for Jenkins 2.0: the User Experience (UX) improvements Thus far in this blog series we have reviewed proposals covering: Introducing a policy for API deprecation Splitting Groovy out of 'core' Pipeline as code front and center The UX...

  

  R. Tyler Croy October 29, 2015
• Jenkins 2.0 Proposal: Pipeline as Code front and center

  We have been featuring a few proposals this week for what "Jenkins 2.0" is going to include, today we’re discussing my personal favorite, which I believe will have a tremendously positive impact for years to come (not to be too biased!): moving the "Pipeline as Code" support in Jenkins to the front and center. Thus far in this blog series we have...

  

  R. Tyler Croy October 28, 2015
• Jenkins 2.0 Proposal: Split Groovy out of "core"

  As I mentioned in yesterday’s post, there’s been a lot of discussion recently about what "Jenkins 2.0" means. In a recent "Office Hours" session, Kohsuke Kawaguchi presented his vision for Jenkins 2.0 in a office hours session, the slides for which can be found in this Google Presentation. Roughly paraphrasing Kohsuke’s vision, 2.0 is primarily about making things better for the thousands of users out there. This week,...

  

  R. Tyler Croy October 27, 2015
• Jenkins 2.0 Proposal: Introduce a policy for API deprecation

  Over the past few weeks there has been a vibrant discussion happening on the jenkinsci-dev@ mailing list as to what "Jenkins 2.0" means. While Jenkins does not currently adhere to semantic versioning, the change of a major version number does indicate a major milestone for the community. Project founder, Kohsuke Kawaguchi presented his vision for Jenkins 2.0 in a office hours session, the slides for which can...

  

  R. Tyler Croy October 25, 2015