# Governance Meeting, April 29, 2024

**URL:** <https://community.jenkins.io/t/governance-meeting-april-29-2024/14671>\
**Category:** Community\
**Tags:** meeting, governance\
**Created:** [April 29, 2024, 6:38pm UTC](https://community.jenkins.io/t/governance-meeting-april-29-2024/14671 "2024-04-29T18:38:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![MarkEWaite](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/markewaite/32/20_2.png) [@MarkEWaite](https://community.jenkins.io/u/MarkEWaite)\
**Post date:** [April 29, 2024, 6:38pm UTC](https://community.jenkins.io/t/governance-meeting-april-29-2024/14671/1 "2024-04-29T18:38:35Z")

</div>

2024-04-29T18:00:00Z

[![](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/4/4ac180343570eb300309121398f38ef2586a8ee3.jpeg "Jenkins Governance Meeting April 29, 2024") ](https://www.youtube.com/watch?v=mJ6mVgekXVA)

# 29 Apr 2024

## Attendees 👥

- @NotMyFault (Alexander Brandes)
- @uhafner (Ullrich Hafner)
- @basil (Basil Crow)
- @MarkEWaite (Mark Waite)
- Srikanth Jana
- Kevin Martens
- Mihir - Jenkins Toronto Meetup

## Upcoming Calendar 📆

- Next weekly release: 2.456
- Next LTS: 2.452.1, May 15, 2024
  - Alex Brandes as release lead
  - Changelog and upgrade guide from Kevin Martens

- Next major events:

## Agenda

### News

- Jenkins has been accepted to Google Summer of Code 2024, see [Blog post](https://www.jenkins.io/blog/2024/02/23/gsoc2024-announcement/) from Alyssa Tong
  - Google will announce the selected projects May 1, 2024

- Jenkins awards announced at cdCon Wednesday 17 Apr 2024. These awards recognize contributions from individuals in the community and the progress made in the name of Jenkins. Awarded candidates are:
  - Most Valuable Jenkins Advocate:
    - Darin Pope

  - Most Valuable Jenkins Contributor:
    - Stefan Spieker

  - Jenkins Security MVP:
    - Yaniv Nizry

### Action Items

- Mark submit application for 2025 AWS open source credits program
  - **Done** - copy provided to the Jenkins board mailing list
  - June 2024 is the expected announcement date

- Basil create the attribution entries for the downloads page
  - Jenkins sponsors have changed
  - Continues on the to-do list
  - Draft PR is almost ready for review at: [Add a Sponsors page by basil · Pull Request #6882 · jenkins-infra/jenkins.io · GitHub](https://github.com/jenkins-infra/jenkins.io/pull/6882)

- Kevin Martens retire the Chinese Jenkins site
  - Mark needs to do more Kubernetes setup, then Kevin and Mark will meet with Damien
  - More work pending

### Community activity

- Contributor Spotlight this week: Mark Waite
  - Next spotlight - Kevin Martens

### Governance Topics

- Trademark request approval
  - Trademark usage request for “Jenkins as a Service by CloudBees” - approved
    - Four active board members approved
    - Complies with Linux Foundation Trademark Guidelines as previously agreed

- Azure expense status
  - Azure donation from Microsoft expires Aug 31, 2024
  - Infrastructure team will accelerate their use of the Azure donation
    - Reduce AWS and DigitalOcean expenses between now and Aug 31, 2024
    - Increase AWS and DigitalOcean expenses after Aug 31, 2024 to offset end of Azure donation
    - Special thanks to Damien, Herve, and Stephane for cost reductions

- AWS credits donation
  - Credits have been received, work started to apply credits to Jenkins tasks

- AWS credit application for 2025
  - Application has been submitted

- [Spring Security 5.8.x end of public support](https://spring.io/blog/2024/03/01/support-timeline-announcement-for-spring-framework-6-0-x-and-5-3-x)
  - Last public build of Spring security framework 5.8.x is August 2024
    - Spring security 6.x requires Jetty 11 with Jakarta EE 9 (jakarta.servlet), not Jetty 10 with Jakarta EE 8 (javax.servlet)
    - August 31, 2024 date seems likely to stick

  - Last public build of Spring framework 5.3.x is August 2024
    - Spring framework 6.1 and later require Java 17

  - Alternatives:
    - Accept that if there is a security vulnerability reported in Spring security 5.8.x between August 2024 and end Oct 2024, we may need to fork Spring Security and fix it ourselves
    - Mark started [discussion in the mailing list](https://groups.google.com/g/jenkinsci-dev/c/gsXAqOQQEPc/m/VT9IBYdmAQAJ) to find alternatives