# Governance Meeting, March 18, 2024

**URL:** https://community.jenkins.io/t/governance-meeting-march-18-2024/13464
**Category:** Community
**Tags:** meeting, governance
**Created:** [March 19, 2024, 11:15am UTC](https://community.jenkins.io/t/governance-meeting-march-18-2024/13464 "2024-03-19T11:15:47Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![MarkEWaite](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/markewaite/32/20_2.png) [@MarkEWaite](https://community.jenkins.io/u/MarkEWaite)
#### Post date: [March 19, 2024, 11:15am UTC](https://community.jenkins.io/t/governance-meeting-march-18-2024/13464/1 "2024-03-19T11:15:47Z")

</div>

2024-03-18T19:00:00Z

[![](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/6/6fa3dc7d4926dcf18fa16fb94f17ef84c4546ced.jpeg "Jenkins Governance Meeting March 18, 2024") ](https://www.youtube.com/watch?v=dYgWYfP2MtI)

# 18 Mar 2024

## Attendees 👥

- @NotMyFault (Alexander Brandes)
- @gounthar (Bruno Verachten)
- @basil (Basil Crow)
- @MarkEWaite (Mark Waite)

## Upcoming Calendar 📆

- Next weekly release: 2.450
- Next LTS: 2.440.2, March 20, 2024
  - RC is ready to be tested
  - Jakarta Mail changes that might break some things (release notes show details)

- Next major events:
  - [cdCon 2024](https://cd.foundation/cdcon-2024/) April 16-18, 2024
    - Co-located with [Open Source Summit North America](https://events.linuxfoundation.org/open-source-summit-north-america/) in Seattle, WA, USA
    - Mark Waite will attend

## Agenda

### News

- Jenkins has been accepted to Google Summer of Code 2024, see [Blog post](https://www.jenkins.io/blog/2024/02/23/gsoc2024-announcement/) from Alyssa Tong
  - Proposols to be sent by end of March

- Jenkins award voting is in progress. These awards recognize contributions from individuals in the community and the progress made in the name of Jenkins. Nominated candidates are:
  - Most Valuable Jenkins Advocate:
    - Alexander Brandes
    - Bruno Verachten
    - Darin Pope
    - Kris Stern

  - Most Valuable Jenkins Contributor:
    - Basil Crow
    - Daniel Beck
    - Kris Stern
    - Stefan Spieker
    - Tim Jacomb
    - Ullrich Hafner

  - Jenkins Security MVP:
    - Alvaro Muñoz
    - Yaniv Nizry

  - [Voting](https://docs.google.com/forms/d/e/1FAIpQLScUHeNX-4H5jboVo6nRxo0-JtMiA8pLvMq2VkNYceax4frHPQ/viewform) is possible until March 22, 2024

### Action Items

- Basil create the attribution entries for the downloads page
  - Jenkins sponsors have changed
  - Continues on the to-do list
  - Draft PR is almost ready for review at: [Add a Sponsors page by basil · Pull Request #6882 · jenkins-infra/jenkins.io · GitHub](https://github.com/jenkins-infra/jenkins.io/pull/6882)

- Kevin Martens retire the Chinese Jenkins site
  - Mark needs to do more Kubernetes setup, then Kevin and Mark will meet with Damien
  - More work after Kevin returns from holiday

### Community activity

- GSoC preparation: A lot of traffic in the community forums, chat rooms, and GitHub repositories
- Contributer Spotlight this week: Bruno Verachten

### Governance Topics

- Azure expense status
  - February expenses were $4200 USD - nicely under $5000 budget
    - Special thanks to Damien, Herve, and Stephane for cost reductions

- AWS credits donation
  - Credits have been received, not yet applying credits to Jenkins tasks

- Delphix plugin uses a [proprietary component](https://github.com/jenkins-infra/helpdesk/issues/3989)
  - Delphix maintainers have proposed an idea for the fix
  - Thanks to @daniel-beck for finding the issue and working with Delphix plugin maintainers

- Java 11 end of life and [Spring end of public support](https://spring.io/blog/2024/03/01/support-timeline-announcement-for-spring-framework-6-0-x-and-5-3-x)
  - Last public build of Spring security framework 5.8.x is August 2024
    - Spring security 6.x requires Jetty 11 with Jakarta EE 9 (jakartaee.servlet), not Jetty 10 with Jakarta EE 8 (javax.servlet)
    - August 31, 2024 date seems likely to stick

  - Last public build of Spring framework 5.3.x is August 2024
    - Spring framework 6.1 and later require Java 17

  - Alternatives:
    - Accept that if there is a security vulnerability reported in Spring security 5.8.x between August 2024 and end Oct 2024, we may need to fork Spring Security and fix it ourselves
    - Mark to start discussions in the mailing list to find alterantives