Commit Graph

6294 Commits

Author SHA1 Message Date
Jenkins Release Bot e06f85b097 [maven-release-plugin] prepare for next development iteration 2023-07-24 17:03:20 +00:00
Jenkins Release Bot 7c7226d76c [maven-release-plugin] prepare release jenkins-2.401.3 2023-07-24 17:03:04 +00:00
Yaroslav Afenkin b45dacfc27 [SECURITY-3188] 2023-07-13 03:16:35 +00:00
Jenkins Release Bot ac02718d17 [maven-release-plugin] prepare for next development iteration 2023-06-28 11:12:16 +00:00
Jenkins Release Bot 8a1d7d664b [maven-release-plugin] prepare release jenkins-2.401.2 2023-06-28 11:12:05 +00:00
Basil Crow c7ba982098 Upgrade Guice from 5.1.0 to 6.0.0 2023-06-10 10:02:38 -07:00
Basil Crow 48e8d260b8 Upgrade parent POM from 1.97 to 1.98 2023-05-31 09:39:52 -07:00
Jenkins Release Bot 5e9365608b [maven-release-plugin] prepare for next development iteration 2023-05-31 09:48:52 +00:00
Jenkins Release Bot 315b3ff534 [maven-release-plugin] prepare release jenkins-2.401.1 2023-05-31 09:48:34 +00:00
Jenkins Release Bot b56709a744 [maven-release-plugin] prepare for next development iteration 2023-04-18 12:45:52 +00:00
Jenkins Release Bot 05b9f80dd8 [maven-release-plugin] prepare release jenkins-2.401 2023-04-18 12:45:41 +00:00
Jenkins Release Bot acb4ae7d9f [maven-release-plugin] prepare for next development iteration 2023-04-11 13:00:39 +00:00
Jenkins Release Bot be5dfb1f08 [maven-release-plugin] prepare release jenkins-2.400 2023-04-11 13:00:28 +00:00
Basil Crow eb7f2dd283
[JENKINS-70953] Remove Prototype $ usage from `RenderOnDemandTest` (#7799) 2023-04-10 11:34:31 +02:00
dependabot[bot] b05567d361
Upgrade `font-awesome-api` from 6.2.1-1 to 6.3.0-2 (#7818)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-07 10:18:54 -07:00
Jenkins Release Bot de46d1eebd [maven-release-plugin] prepare for next development iteration 2023-04-04 20:04:55 +00:00
Jenkins Release Bot 553d08a208 [maven-release-plugin] prepare release jenkins-2.399 2023-04-04 20:04:40 +00:00
Jenkins Release Bot b0b2fd194e [maven-release-plugin] prepare for next development iteration 2023-04-04 12:50:32 +00:00
Jenkins Release Bot 86cc5c7ed7 [maven-release-plugin] prepare release jenkins-2.398 2023-04-04 12:49:53 +00:00
dependabot[bot] 319dfc6134
Bump jenkins-test-harness from 1949.vb_b_37feefe78c to 1952.v3a_b_0cd3f5a_03 (#7793)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-03 08:07:20 +01:00
Jenkins Release Bot 6a4b4c52a9 [maven-release-plugin] prepare for next development iteration 2023-03-28 13:01:59 +00:00
Jenkins Release Bot 37ceefe983 [maven-release-plugin] prepare release jenkins-2.397 2023-03-28 13:01:31 +00:00
Jenkins Release Bot 696b286e1f [maven-release-plugin] prepare for next development iteration 2023-03-21 12:50:30 +00:00
Jenkins Release Bot 5789e5c230 [maven-release-plugin] prepare release jenkins-2.396 2023-03-21 12:50:18 +00:00
dependabot[bot] d20b4fb907
Bump junit from 1166.va_436e268e972 to 1189.v1b_e593637fa_e (#7745)
Bumps [junit](https://github.com/jenkinsci/junit-plugin) from 1166.va_436e268e972 to 1189.v1b_e593637fa_e.
- [Release notes](https://github.com/jenkinsci/junit-plugin/releases)
- [Commits](https://github.com/jenkinsci/junit-plugin/commits)

---
updated-dependencies:
- dependency-name: org.jenkins-ci.plugins:junit
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 10:45:15 +01:00
dependabot[bot] 582bbd40e5
Bump credentials from 1214.v1de940103927 to 1224.vc23ca_a_9a_2cb_0 (#7730)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-17 09:35:50 +00:00
Jesse Glick 3fe425f29d
Let `TokenBasedRememberMeServices2` tolerate `Authentication.principal` not `UserDetails` (#7724) 2023-03-17 09:34:54 +00:00
Jenkins Release Bot e3a0f48edb [maven-release-plugin] prepare for next development iteration 2023-03-14 12:47:01 +00:00
Jenkins Release Bot 45542cc65b [maven-release-plugin] prepare release jenkins-2.395 2023-03-14 12:46:50 +00:00
dependabot[bot] e563e8584d
Bump jenkins-test-harness from 1938.ve4c94459431d to 1949.vb_b_37feefe78c (#7707)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-12 22:26:37 +00:00
Wadeck Follonier af09d67bb4
[JENKINS-69853] User experimental flags (#7299)
* [JENKINS-69853] User experimental flags

* Applying feedbacks from Tim

* Improve default wording + padding + title

* Remove the "UI"

* Correct Spotbugs

---------

Co-authored-by: Alexander Brandes <mc.cache@web.de>
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com>
2023-03-12 10:52:04 +01:00
dependabot[bot] eed7766a50
Bump antisamy-markup-formatter from 155.v795fb_8702324 to 159.v25b_c67cd35fb_ (#7694)
Bump antisamy-markup-formatter

Bumps [antisamy-markup-formatter](https://github.com/jenkinsci/antisamy-markup-formatter-plugin) from 155.v795fb_8702324 to 159.v25b_c67cd35fb_.
- [Release notes](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/releases)
- [Changelog](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/commits)

---
updated-dependencies:
- dependency-name: org.jenkins-ci.plugins:antisamy-markup-formatter
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-12 10:41:15 +01:00
Alexander Brandes f9e3131c02
Fix `RunRangeCommand2Test#dummyRangeShouldSuccessEvenTheBuildIsRunning` on macOS (#7706)
Fix RunRangeCommand2Test on macOS
2023-03-12 10:40:57 +01:00
Alexander Brandes 1cbc0cabe8
[JENKINS-70647] Fix `hudson.util.ProcessTreeTest#considersKillingVetosOnSlave` on macOS (#7704)
[JENKINS-70647] Fix hudson.util.ProcessTreeTest on macOS
2023-03-12 10:39:44 +01:00
Alexander Brandes 5b6e14dfe3
[JENKINS-70646] Fix `hudson.cli.ConsoleCommandTest` on macOS (#7705)
[JENKINS-70646] Fix hudson.cli.ConsoleCommandTest on macOS
2023-03-12 10:36:40 +01:00
Jesse Glick 3a07a2c2f8
Make `StopBuildsCommand` work even if the last build is not running (#7679) 2023-03-10 22:04:37 +00:00
dependabot[bot] d31acb3c0c
Bump cloudbees-folder from 6.800.v71307ca_b_986b to 6.815.v0dd5a_cb_40e0e (#7686)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-10 22:02:45 +00:00
Kevin Guerroudj 9d979384e7
Merge March 8 security tests into their main class (#7700) 2023-03-10 22:01:49 +00:00
Jenkins Release Bot 89d37d8ee3 [maven-release-plugin] prepare for next development iteration 2023-03-06 23:01:26 +00:00
Jenkins Release Bot 2fe98001f3 [maven-release-plugin] prepare release jenkins-2.394 2023-03-06 23:01:11 +00:00
Yaroslav Afenkin ecccc26a39 Merge branch 'security-master' 2023-02-28 17:03:58 +02:00
Jenkins Release Bot e41aeaacf4 [maven-release-plugin] prepare for next development iteration 2023-02-28 13:15:16 +00:00
Jenkins Release Bot 9044b4379c [maven-release-plugin] prepare release jenkins-2.393 2023-02-28 13:15:05 +00:00
Mark Waite a7b36ef111
[JENKINS-70599] restore installNecessaryPlugins redirect destination (#7653)
* Test redirect from installNecessaryPlugins

Jenkins LTS versions prior to 2.375.1 redirected to an existing URL.
Jenkins 2.375.1 - 2.375.3 redirect to a non-existent URL.

Test that the old behavior is restored.

* [JENKINS-70599] restore installNecessaryPlugins redirect destination

The installNecessaryPlugins API end point previously redirected to the
"/updateCenter" URL.  When the side bar was added to the plugin
manager, the redirect was changed to "/updates".  Unfortunately, there
is no page at "/updates", while there is a page at "/updateCenter".

This restores the redirect for the installNecessaryPlugins API call.

If the redirect is not restored, calls to the API that follow the redirect
fail with a page not found (HTTP 404).

I did not find any callers to that API from inside Jenkins core.

Change introduced in 6db88c3f5b

* Use default HttpClient version

The HttpClient documentation notes that if the default is selected but
not supported, then the client will automatically downgrade to HTTP 1.1.
Browsers only support HTTP 2 over TLS, but that's not a requirement of
the HTTP 2 specification.

https://http2.github.io/faq/#does-http2-require-encryption

* Adjust test timeouts based on actual test results

Tests on ci.jenkins.io showed that installNecessaryPluginsTest completes
as follows:

* 9.4 seconds Windows JDK 17
* 0.8 seconds Linux JDK 11
* 1.0 seconds Linux JDK 17
* 1.1 seconds Linux JDK 19

With those timings, it seems reasonable to set the crumb request to
timeout in not more than 7 seconds and the plugin installation request
to timeout in not more than 20 seconds.  That will waste a little less
time in execution if there is a problem and still leaves room for low
performance systems.

* Redirect to newer pluginManager URL
2023-02-25 01:45:23 -05:00
Kevin-CB d034626fd5 [SECURITY-2399] 2023-02-23 07:59:13 +00:00
Yaroslav Afenkin 59ac866d99 [SECURITY-3037] 2023-02-23 07:59:06 +00:00
Daniel Beck b70f4cb589 [SECURITY-3030] 2023-02-23 07:59:00 +00:00
Kevin-CB f39c11fa27 [SECURITY-2823] 2023-02-23 07:58:53 +00:00
Jeff Thompson 40663588ee [SECURITY-2120] 2023-02-23 07:58:46 +00:00
Jeff Thompson 80452662b3 [SECURITY-1807]
Co-authored-by: Kevin-CB <kguerroudj@cloudbees.com>
2023-02-23 07:58:40 +00:00