Platform SIG December 16, 2025

[poddingue (Bruno Verachten)]

2025 12 16 Jenkins Platform SIG

Attending:

• Mark Waite
• Bruno Verachten
• Salman

Agenda

• Java 17 and 21: status update
  • Java 17 end of life proposal
    • March 31, 2026 is the warning date in the admin monitor
    • Can already drop Java 17 from Jenkins weekly
    • Needs to be dropped before next LTS baseline (April 2026) to not support Java 17
    • Java 17 is being dropped from Jenkinsfile configs
• Java 25
  • Released Sep 16, 2025
  • Jenkins core itself is compatible with JDK25 since 2.534
  • Plugin maintainers can give it a try
    • Available as a tool
    • A .mvn/maven.config may be necessary
  • We are trying to compile the top 250 plugins with JDK25
    • Jenkins Plugins JDK25 compatibility test shows 166 (was 162) plugins are already building with JDK25 for real
    • Mark’s checks show 220+ of 250 repositories already testing with Java 25
      • Ignored deprecated repositories
      • Ignored archived repositories
      • Ignored repositories that do not have a Jenkinsfile
  • https://github.com/orgs/jenkinsci/projects/41 is a GitHub project to see how we progress with JDK25
  • Agents
    • We have a JDK25 Docker agent image and a JDK25 Docker SSH agent image
  • Controller
    • feat(linux): add support on Linux for JDK 25 preview in Docker build configurations has been closed, as Jenkins controller wasn’t compatible with Java 25 yet, but we can recreate it now
• Container image updates for the Jenkins controller
  • LTS
    • 2.528.3 was released last week
      • Release Lead: @krisstern with Shalini assisting
      • Dependency updates
        • Bump Alpine Linux Version to 3.23.0
        • Bumps ubi9/ubi to 9.7-1764794285
      • Next LTS should be based on 2.541.
      • The 2.541.1 release is scheduled for Jan 21, 2026, release candidate Jan 7, 2026
  • Weeklies (2.541 and 2.542)
    • Dependency updates
      • Bump updatecli/updatecli-action to 2.98.0
      • Bump peter-evans/create-pull-request from 7 to 8
      • Bump ubi9/ubi to 9.7-1764794285 in /rhel/ubi9/hotspot
      • Bump Alpine Linux Version to 3.23.0
• Container image updates for Jenkins agents
  • One new release for the SSH agent (7.9.0)
    • Documentation updates
      • docs: Add preserve host keys tips
    • Maintenance
      • Reorder Windows tests and improve their descriptions
    • Dependency updates
      • Bump Alpine Linux Version to 3.23.0
      • Bump Debian Trixie Linux version to trixie-20251117
  • Three new releases for the docker agent ( 3355.v388858a_47b_33-1, 3355.v388858a_47b_33-2, and 3355.v388858a_47b_33-3
    • Bug fixes
      • Install git-lfs config to system rather than global
    • Documentation updates
      • Fix alpine typos in agent image listing
    • Dependency updates
      • Bump Alpine Linux Version to 3.23.0
      • Bump UBI9 version to 9.7-1764794285
    • New features and improvements
      • Bump the Jenkins remoting version to 3355.v388858a_47b_33 (* Treat connectTcp as part of retryable I/O (#1512) @jglick)
• Work in progress on images:
  • Controller:
    • None
  • Docker-agent:
    • chore(windows): run each JDK tests in parallel
    • chore(windows): build 2022 images from a 2025 agent
  • Docker-ssh-agent:
    • chore(windows): build 2022 images from a 2025 agent
    • feat: add Windows 2025 images for docker-ssh-agent
      • Windows Server 2019 reached the end of mainstream support on January 9, 2024
      • Continuing to use 2019-based images exposes Jenkins environments to unpatched vulnerabilities and compliance issues, as the operating system no longer receives comprehensive maintenance.
      • Switching to Windows Server 2025 ensures ongoing security patches and reduces risks in containerized builds.
      • This new version also brings a new feature that could help us for the Windows build performances: Dev Drive which allows creating a drive dedicated for the build files requiring a lot of I/Os (Maven local repository, build directories, etc.)
• Code signing for the MSI installer
  • Current signing expires May 16, 2026
  • Digicert requires a physical device or use their signing service
  • Microsoft now offers a GitHub action for signing
    • Needs investigation to understand how to use it and what it means
• Contributor Summit
  • January 30, in Brussels (BetaCowork)
  • 30 people at most, contributors have been invited by email