# Governance Meeting, July 24, 2023 **URL:** \ **Category:** Community\ **Tags:** meeting, governance\ **Created:** [July 25, 2023, 12:53pm UTC](https://community.jenkins.io/t/governance-meeting-july-24-2023/8663 "2023-07-25T12:53:21Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![MarkEWaite](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/markewaite/32/20_2.png) [@MarkEWaite](https://community.jenkins.io/u/MarkEWaite)\ **Post date:** [July 25, 2023, 12:53pm UTC](https://community.jenkins.io/t/governance-meeting-july-24-2023/8663/1 "2023-07-25T12:53:21Z")
2023-07-24T17:00:00Z [![](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/3/3fc24f2f56038126e8d30a6a0f19e30fdfa5d036.jpeg "Jenkins Governance Meeting July 24, 2023") ](https://www.youtube.com/watch?v=8ymkIcuAMQQ) ## Jul 24, 2023 Participants: Mark Waite, Alexander Brandes, Basil Crow, Ullrich Haffner, Bruno Verachten Agenda: - News - Releases - Jenkins 2.401.3 released Wednesday July 26, 2023 - Security release as announced in [Jenkins advisories mailing list](https://groups.google.com/g/jenkinsci-advisories/c/2GiSsACaT28/m/BCIjzsneBQAJ), includes 2.416 - Merges are paused to the controller branch of Jenkins core until after the release - Jenkins 2.414 is the next LTS baseline - Jenkins 2.414.1 release candidate Aug 9, 2023 - Jenkins 2.414.1 release Aug 23, 2023 - Action Items - Mark Waite archive the governance meeting notes to a GitHub repository, use the Google doc as the working document, then publish final notes ( **done** ) - Mark archive submitted to the [governance meeting archives repository](https://github.com/jenkins-infra/governance-meetings-archives/) in a [merged pull request](https://github.com/jenkins-infra/governance-meetings-archives/pull/10) - : Thoughts about using HackMD ([https://hackmd.io/6mgEkr1rS7Ca4j4a5YxZfA](https://hackmd.io/6mgEkr1rS7Ca4j4a5YxZfA)) as a living document, like the infra team does? - Allowing us to retire this doc totally - Reduce the size of this document to make it more reliable - Test drive next meeting on HackMD - has invited Mark to the document - Mark Waite [retrospective on signing certificate renewal process](https://docs.google.com/document/d/1BB2TueNTLhK3TcJ5senSSSMdzy9D95DxPXuWNzL3k2s/edit#) and its improvements - Code signing certificate update for MSI and WAR files - PGP signing key update for RPM and DEB files - Debian key packaging improvements (some other projects use that technique now) - Notification and process improvements - Reimbursement improvements - Details being gathered in the [retrospective document](https://docs.google.com/document/d/1BB2TueNTLhK3TcJ5senSSSMdzy9D95DxPXuWNzL3k2s/edit#) - Mark Waite submit [jenkins.io](http://jenkins.io) pull request to combine subprojects and SIGs into a single concept - “working groups” - More pull requests needed - Alexander Brandes and Ullrich Hafner run the officer and board elections for 2023 - Mark cancel the August 7 board meeting - next meeting Aug 21 - Community activity - Artifactory bandwidth reduction project - JFrog hosts [https://repo.jenkins-ci.org](https://repo.jenkins-ci.org) and covers all costs for the Jenkins project - JFrog is happy to continue hosting and sponsoring [https://repo.jenkins-ci.org](https://repo.jenkins-ci.org) - Bandwidth use has been excessive due to abuse and misuse of its services - Duplicate downloads of released artifacts (jenkins.war, some tool installers) - 20 TB per month saved by blocking IP address of one abuser (March 2023) - JFrog has asked us to password protect our mirrors for the next reduction in bandwidth - Mark Waite’s proposal is described in detail in the [help desk ticket](https://github.com/jenkins-infra/helpdesk/issues/3599#issuecomment-1640551729) - Action: Mark scheduling a discussion session this week with Jenkins infra, Jenkins security, and others - Damien Duportal, Daniel Beck, James Nord, Stephane Merle, Herve LeMeur - Other are welcome to attend - [Prototype.js removal blog post](https://www.jenkins.io/blog/2023/05/12/removing-prototype-from-jenkins/) guides new contributors - [Prototype.js removal epic](https://issues.jenkins.io/browse/JENKINS-70906) making progress - Plugin progress visible in the [tracking sheet](https://docs.google.com/spreadsheets/d/1dpaKALZaK0_HIGy6ony3wnegr1frTg3u1lngG4KdoC8/edit?usp=sharing) - Concern for company maintained plugins to services we cannot test ourselves - Artifactory - maintained by JFrog (Over 22k installed) - Fortify - maintained by MicroFocus (Over 4k installed) - Xray test management for JIRA - maintained by David Duarte (Over 2k installed) - Synopsys Coverity - maintained by Synopsys (Over 1k installed) - qTest - maintained by Tricentis (Over 1k installed) - May need to make special requests to those company maintainers - Thanks to Rahul for the Prototype.js fixes (active choices and git parameter plugin both more difficult, released!) - HTMLUnit 3 upgrades proceeding through [250+ plugin pull requests](https://github.com/search?q=org%3Ajenkinsci+Upgrade+HtmlUnit+from+2.x+to+3.x&type=pullrequests) - Completed for [test harness](https://github.com/jenkinsci/jenkins-test-harness/pull/589), [core 2.409](https://github.com/jenkinsci/jenkins/pull/8050), tools, [plugin pom 4.66](https://github.com/jenkinsci/jenkins-test-harness/pull/589), and [plugin bom 2163](https://github.com/jenkinsci/bom/releases/tag/2163.v2d916d90c305) - See the [tracking sheet](https://docs.google.com/spreadsheets/d/1ih_gVd9uhxLw4BZ6IeJGrYsvu-DvIF0xovu4wZbaXy8/edit#gid=0) for latest status - Thanks to Tim Jacomb and Basil Crow, see Tim’s [replacement script](https://github.com/timja/htmlunit-2.x-to-3.x/blob/97a8841acda9660aa5fbff26ac2514a79749bce0/replace.sh) - [4 Google Summer of Code projects](https://www.jenkins.io/blog/2023/05/04/gsoc2023-projects-announcement/) midterm evaluations complete - [Mid-term presentations recording](https://youtu.be/W4eSVCTmqb8) is available