Platform SIG December 03, 2024

[poddingue (Bruno Verachten)]

2024 12 03 Jenkins Platform SIG

Attending:

• Mark Waite
• Antoine Neveux
• Kevin Martens
• Kris Stern
• Hervé Lemeur
• Bruno Verachten

Agenda:

• End of support for Java 11/2.479.x
  • Container repo for controller repo has dropped Java 11
  • Weekly 2.463 dropped support for Java 11.
  • Jenkins LTS 2.479.1 dropped support for Java 11 on 30 Oct 2024.
  • Jenkins 2.479.2 has been released on November 27, 2024.
    • Mark and Darin made a live video about the changes in 2.479.2 yesterday
    • Important security fix. security advisory
    • Enhancement
      • Upgrade Script Security plugin to 1368.vb_b_402e3547e7. Includes a fix for SECURITY-3447. pull 9970, JENKINS-74852, Script Security plugin 1368.vb_b_402e3547e7 release notes
    • Bug fix
      • Upgrade XStream to 1.4.21. XStream 1.4.21 includes a fix for CVE-2024-47072. JENKINS-74826
      • Do not add jobs created via the REST API to the default view (regression in 2.475). JENKINS-74795
      • Allow context classloaders to be defined without making explicit reference to the calling class.
  • Jenkins infra end of support for Java 11 needs planning and discussion
    • Infra team is willing to continue Java 11 for a while, but at some point in the future, Java 11 won’t be available on Jenkins infra
      • Plan is still being developed, no timelines have been set
      • Endoflife.date could help monitor that - Eclipse Temurin 11 end of life October 2027
• Container image updates for the Jenkins controller
  • LTS
    • 2.479.2 has been delivered last week
  • Weeklies (2.487 and 2.488)
    • Bug fixes
      • Install git-lfs from tar.gz instead of packagecloud
    • Maintenance
      • Fix “FromAsCasing: ‘as’ and ‘FROM’ keywords’ casing do not match” warning
      • Add git-lfs updatecli manifest
      • chore(updatecli): Duplicate file path in targets configuration.
      • chore(updatecli): Uses the native temurin source
    • Dependency updates
      • Bump updatecli/updatecli-action from 2.71.0 to 2.72.0
    • Changes in progress for Windows installers
      • The first delivery was attempted but reverted as it caused the build’s failure
• Container image updates for Jenkins agents
  • Two new releases for the SSH agent (6.3.0 and 6.4.0 )
    • Dependency updates
      • Bump git-lfs version on Windows to 3.6.0
    • Maintenance
      • Uses the native temurin source.
    • Tests
      • chore(tests): Bump bats version to v1.11.1
  • One new release for the docker-agent (3283.v92c105e0f819-2)
    • New features and improvements
      • Bump git-lfs version on Windows to 3.6.0
      • Bump Git version on Windows to 2.47.1.windows.1
    • Maintenance
      • Use the native temurin source
  • Tests
    • Bump bats version to v1.11.1 (#909) @github-actions
  • Dependency updates
    • Bump UBI9 version to 9.5-1732804088
    • Bump Debian Bookworm Linux version to bookworm-20241111
    • Bump updatecli/updatecli-action from 2.68.0 to 2.70.0
• Work in progress on images:
  • Controller:
    • Optimized Debian dockerfiles, Enhanced readability + Enhanced code structure.
  • Docker-agent:
    • Adds documentation to the script and enhances the jq command.
  • Docker-ssh-agent:
• 2+2+2 Java Support Plan
  • Jenkins enhancement proposal by Mark Waite submitted and being reviewed
• Ampere blog post and video/interview regarding Jenkins and aarch64
• Scheduled to meet on the 17th, let’s cancel the 31st meeting.