Governance Meeting, September 18, 2023

Community
,
1

2023-09-18T18:00:00Z

18 Sep 2023

Attendees :busts_in_silhouette:

Upcoming Calendar :calendar:

  • Next LTS: 2.414.2, September 20, 2023
  • Next Security Release 2.414.2 per jenkinsci-advisories: September 20, 2023.
  • Next major events:
    • Jenkins officer and board elections
      • Nomination of candidates opens today, Sep 18, 2023, closes Oct 27, 2023
      • Voter registration starts today, closes Nov 5, 2023
      • Voting from Nov 6 - Dec 1
      • Results announced Dec 11

Agenda

News

Action Items

  • Alexander Brandes and Ullrich Hafner run the officer and board elections for 2023
    • Timeline
      • Nomination of candidates (September 18 - October 27)
      • Voter registration (September 18 - November 05)
      • Voting (November 06 - December 1)
      • Results announcement (December 11)
    • Alexander Brandes documented how to nominate someone, and how CIVS works; both for voters and the election committee
  • Mark Waite submit pull request to replace ICRC link with URC link on top page (done and merged)
  • Mark Waite retrospective on signing certificate renewal process and its improvements
    • Code signing certificate update for MSI and WAR files
    • PGP signing key update for RPM and DEB files
      • Debian key packaging improvements (some other projects use that technique now)
      • Notification and process improvements
        • Reimbursement improvements
      • Details being gathered in the retrospective document
  • Mark Waite submit jenkins.io pull request to combine subprojects and SIGs into a single concept - “working groups”
    • More pull requests needed
  • Retire the Chinese Jenkins site - deadline for 4 weeks to close (Kevin Martens)
  • Mark Waite draft a proposal to the board for license policy and phrasing changes
    • Allow other licenses like the JSON license
    • Some other approach?
    • What license should be used for a library plugin?
      • License of the wrapped library (if wrapped library has no separate code, then seems likely)
      • MIT license as used by Jenkins plugins (if abstraction layer in the plugin, then MIT for ours?)
    • Review responses from other projects to license mixture (e.g. PyPI)
      • Mostly focuses on OSI approved licenses but include a separate category for other licenses
        • Have categories for freeware, public domain, and more
        • Reasonable precedent for allowing a wider range of licenses
        • Needs more discussion, but being more permissive is working for PyPI
        • Newer licenses may be more controversial

Governance Topics

Community activity

  • Java 11, 17, and 21 in Jenkins - Mark Waite
    • Google doc describes plan that has been discussed with Jenkins board and Jenkins officers
      • Further discussion in this meeting?
      • Diagram that illustrates the transition process to “2+2+2”
    • Summary of discussions
      • Jenkins developers mailing list - Mark Waite to send
      • Jenkins users mailing list - Mark Waite to send
      • Jenkins enhancement proposal - Mark Waite to create JEP
    • Key dates upcoming
      • Sep 19, 2023 - Java 21 release
      • Oct 3, 2023 - Java 11 end of life monitor visible in Jenkins weekly
      • Oct xx, 2023 - Java 21 supported by Jenkins core and many plugins
      • Dec 13, 2023 - Java 11 end of life monitor visible in Jenkins LTS
      • Aug 7, 2024 - Last Jenkins LTS release to support Java 11
      • Sep 4, 2024 - First Jenkins LTS to require Java 17
      • Oct 2024 - end of Java 11 support by Jenkins project
  • Artifactory bandwidth reduction project https://repo.jenkins-ci.org
    • JFrog requests implemented and announced in blog post
      • Open issues being addressed by infrastructure team
  • Prototype.js removal
    • Oct 3, 2023 proposed as the date to remove Prototype.js from Jenkins core
    • Prototype.js removal epic making good progress
    • Tracking sheet shows details
    • Most popular plugins already updated, with few exceptions
      • JFrog Artifactory (work starts in September - 23000 installs)
      • Microfocus Fortify (expected in September or October - 4200 installs)
      • Xray test management for Jira (no response - 1900 installs)
      • Synopsys Coverity (no response - 1400 installs)
      • Tricentis qTest (no response - 1300 installs)
    • Feature flag available to disable prototype in Jenkins core 2.406 and later
  • Hacktoberfest preparation has started