Commit Graph
33421 Commits
Author SHA1 Message Date
Mark Waite 166eb00a52 Minor updates to MAINTAINERS doc (#7643) 2023-03-12 13:01:26 +01:00
af09d67bb4 [JENKINS-69853] User experimental flags (#7299)
* [JENKINS-69853] User experimental flags

* Applying feedbacks from Tim

* Improve default wording + padding + title

* Remove the "UI"

* Correct Spotbugs

---------

Co-authored-by: Alexander Brandes <mc.cache@web.de>
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com>
2023-03-12 10:52:04 +01:00
6c076b99bf [JENKINS-69955] Make websocket connection idleTimeout configurable (#7670)
* [JENKINS-69955] Make websocket connection idleTimeout configurable and adjust the default

* [JENKINS-69955] Do not cache JettyWebSocketServerContainer

* [JENKINS-69955] AtomicBoolean is not needed

* [JENKINS-69955] remove unused import

---------

Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com>
Co-authored-by: Alexander Brandes <mc.cache@web.de>
2023-03-12 10:44:53 +01:00
dependabot[bot]andTim Jacomb f54693d102 Bump spotless-maven-plugin from 2.33.0 to 2.34.0 (#7683)
Bumps [spotless-maven-plugin](https://github.com/diffplug/spotless) from 2.33.0 to 2.34.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](https://github.com/diffplug/spotless/compare/lib/2.33.0...lib/2.34.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com>
2023-03-12 10:42:20 +01:00
dependabot[bot] eed7766a50 Bump antisamy-markup-formatter from 155.v795fb_8702324 to 159.v25b_c67cd35fb_ (#7694)
Bump antisamy-markup-formatter

Bumps [antisamy-markup-formatter](https://github.com/jenkinsci/antisamy-markup-formatter-plugin) from 155.v795fb_8702324 to 159.v25b_c67cd35fb_.
- [Release notes](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/releases)
- [Changelog](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/commits)

---
updated-dependencies:
- dependency-name: org.jenkins-ci.plugins:antisamy-markup-formatter
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-12 10:41:15 +01:00
Alexander Brandes f9e3131c02 Fix RunRangeCommand2Test#dummyRangeShouldSuccessEvenTheBuildIsRunning on macOS (#7706)
Fix RunRangeCommand2Test on macOS
2023-03-12 10:40:57 +01:00
Alexander Brandes 1cbc0cabe8 [JENKINS-70647] Fix hudson.util.ProcessTreeTest#considersKillingVetosOnSlave on macOS (#7704)
[JENKINS-70647] Fix hudson.util.ProcessTreeTest on macOS
2023-03-12 10:39:44 +01:00
renovate[bot] cbbf52a4c6 Update dependency eslint-config-prettier to v8.7.0 (#7699)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-12 10:38:32 +01:00
Alexander Brandes 5b6e14dfe3 [JENKINS-70646] Fix hudson.cli.ConsoleCommandTest on macOS (#7705)
[JENKINS-70646] Fix hudson.cli.ConsoleCommandTest on macOS
2023-03-12 10:36:40 +01:00
renovate[bot] 5507c9260f Update dependency mini-css-extract-plugin to v2.7.3 (#7708)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-12 10:36:18 +01:00
renovate[bot] 1506e1a3a3 Update dependency node to v18.15.0 (#7711)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-12 10:35:16 +01:00
Alexander Brandes 6e91af0542 Move renovate configuration to .github folder (#7710)
Move renovate configuration to .github folder
2023-03-11 00:19:54 +01:00
renovate[bot] 953319e6e6 Update dependency node to v18.14.2 (#7682)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-10 22:04:42 +00:00
Jesse Glick 3a07a2c2f8 Make StopBuildsCommand work even if the last build is not running (#7679) 2023-03-10 22:04:37 +00:00
Jan Faracik a1f732f218 Add copy button to Jenkins home directory (#7678) 2023-03-10 22:04:20 +00:00
renovate[bot] 07b266d1e4 Update dependency eslint to v8.35.0 (#7685)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-10 22:04:11 +00:00
Jan FaracikandTim Jacomb 714574cf74 Simplify settings names (#7661)
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com>
2023-03-10 22:03:39 +00:00
Jan Faracik e129c5e465 Remove config-scrollspy/config-tabbar (#7688) 2023-03-10 22:03:22 +00:00
Daniel Beck acc8d15022 It's called update site, not central plugin repository (#7697) 2023-03-10 22:03:12 +00:00
dependabot[bot] d31acb3c0c Bump cloudbees-folder from 6.800.v71307ca_b_986b to 6.815.v0dd5a_cb_40e0e (#7686)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-10 22:02:45 +00:00
Kevin Guerroudj 9d979384e7 Merge March 8 security tests into their main class (#7700) 2023-03-10 22:01:49 +00:00
Jenkins Release Bot 89d37d8ee3 [maven-release-plugin] prepare for next development iteration 2023-03-06 23:01:26 +00:00
Jenkins Release Bot 2fe98001f3 [maven-release-plugin] prepare release jenkins-2.394 jenkins-2.394 2023-03-06 23:01:11 +00:00
Daniel Beck 8ec86287cb Derestrict VirtualFile#list(String,String,boolean) again 2023-03-05 15:23:59 +01:00
Yaroslav Afenkin ecccc26a39 Merge branch 'security-master' 2023-02-28 17:03:58 +02:00
Jenkins Release Bot e41aeaacf4 [maven-release-plugin] prepare for next development iteration 2023-02-28 13:15:16 +00:00
Jenkins Release Bot 9044b4379c [maven-release-plugin] prepare release jenkins-2.393 jenkins-2.393 2023-02-28 13:15:05 +00:00
dependabot[bot] a9742213a5 Bump spring-security-bom from 5.8.1 to 5.8.2 (#7667)
Bumps [spring-security-bom](https://github.com/spring-projects/spring-security) from 5.8.1 to 5.8.2.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/5.8.1...5.8.2)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 21:35:00 +01:00
Mark Waite f0be0ca01f [JENKINS-21052] Warn user that the copy button requires HTTPS (#7665)
Warn user that the copy button requires HTTPS

Users that run Jenkins over an unencrypted (HTTP) connection will see
the copy button, but it does not perform a copy.  Browsers will only
allow access to the clipboard if the page is in a secure context.

With this change, the text that is displayed when the user clicks the
copy button from an insecure context will alert the user that copy
requires a secure connection.

https://stackoverflow.com/questions/400212/how-do-i-copy-to-the-clipboard-in-javascript
describes the alternatives in more detail.

https://issues.jenkins.io/browse/JENKINS-21052 reported that the copy
button does not work.  I've confirmed that it works when using an HTTPS
connection.
2023-02-26 18:48:11 -05:00
dependabot[bot] bc7f06c9bd Bump antlr.version from 4.11.1 to 4.12.0 (#7664)
Bumps `antlr.version` from 4.11.1 to 4.12.0.

Updates `antlr4-maven-plugin` from 4.11.1 to 4.12.0
- [Release notes](https://github.com/antlr/antlr4/releases)
- [Changelog](https://github.com/antlr/antlr4/blob/master/CHANGES.txt)
- [Commits](https://github.com/antlr/antlr4/compare/4.11.1...4.12.0)

Updates `antlr4-runtime` from 4.11.1 to 4.12.0
- [Release notes](https://github.com/antlr/antlr4/releases)
- [Changelog](https://github.com/antlr/antlr4/blob/master/CHANGES.txt)
- [Commits](https://github.com/antlr/antlr4/compare/4.11.1...4.12.0)

---
updated-dependencies:
- dependency-name: org.antlr:antlr4-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.antlr:antlr4-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-25 11:16:57 +01:00
Antoine NeveuxandDaniel Beck 93c8e7663e [JENKINS-70662] Disable browser form validation from submit button (#7668)
* [JENKINS-70662] Disable browser form validation from submit button

* Update core/src/main/resources/lib/form/submit.jelly

Co-authored-by: Daniel Beck <1831569+daniel-beck@users.noreply.github.com>

---------

Co-authored-by: Daniel Beck <1831569+daniel-beck@users.noreply.github.com>
2023-02-25 05:15:39 -05:00
renovate[bot] d512f95784 Update babel monorepo to v7.21.0 (#7671)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-02-25 11:14:33 +01:00
Mark Waite a7b36ef111 [JENKINS-70599] restore installNecessaryPlugins redirect destination (#7653)
* Test redirect from installNecessaryPlugins

Jenkins LTS versions prior to 2.375.1 redirected to an existing URL.
Jenkins 2.375.1 - 2.375.3 redirect to a non-existent URL.

Test that the old behavior is restored.

* [JENKINS-70599] restore installNecessaryPlugins redirect destination

The installNecessaryPlugins API end point previously redirected to the
"/updateCenter" URL.  When the side bar was added to the plugin
manager, the redirect was changed to "/updates".  Unfortunately, there
is no page at "/updates", while there is a page at "/updateCenter".

This restores the redirect for the installNecessaryPlugins API call.

If the redirect is not restored, calls to the API that follow the redirect
fail with a page not found (HTTP 404).

I did not find any callers to that API from inside Jenkins core.

Change introduced in 6db88c3f5b

* Use default HttpClient version

The HttpClient documentation notes that if the default is selected but
not supported, then the client will automatically downgrade to HTTP 1.1.
Browsers only support HTTP 2 over TLS, but that's not a requirement of
the HTTP 2 specification.

https://http2.github.io/faq/#does-http2-require-encryption

* Adjust test timeouts based on actual test results

Tests on ci.jenkins.io showed that installNecessaryPluginsTest completes
as follows:

* 9.4 seconds Windows JDK 17
* 0.8 seconds Linux JDK 11
* 1.0 seconds Linux JDK 17
* 1.1 seconds Linux JDK 19

With those timings, it seems reasonable to set the crumb request to
timeout in not more than 7 seconds and the plugin installation request
to timeout in not more than 20 seconds.  That will waste a little less
time in execution if there is a problem and still leaves room for low
performance systems.

* Redirect to newer pluginManager URL
2023-02-25 01:45:23 -05:00
dependabot[bot]andMark Waite baca541866 Bump tyrus-standalone-client-jdk from 2.1.2 to 2.1.3 (#7659)
Bumps tyrus-standalone-client-jdk from 2.1.2 to 2.1.3.

---
updated-dependencies:
- dependency-name: org.glassfish.tyrus.bundles:tyrus-standalone-client-jdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mark Waite <mark.earl.waite@gmail.com>
2023-02-24 11:32:50 +01:00
renovate[bot] aadbfc04c7 Update dependency stylelint to v15.2.0 (#7669)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-02-24 11:26:04 +01:00
Kevin-CB 554587b06d [SECURITY-3058] 2023-02-23 07:59:19 +00:00
Kevin-CB d034626fd5 [SECURITY-2399] 2023-02-23 07:59:13 +00:00
Yaroslav Afenkin 59ac866d99 [SECURITY-3037] 2023-02-23 07:59:06 +00:00
Daniel Beck b70f4cb589 [SECURITY-3030] 2023-02-23 07:59:00 +00:00
Kevin-CB f39c11fa27 [SECURITY-2823] 2023-02-23 07:58:53 +00:00
Jeff Thompson 40663588ee [SECURITY-2120] 2023-02-23 07:58:46 +00:00
Jeff ThompsonandKevin-CB 80452662b3 [SECURITY-1807]
Co-authored-by: Kevin-CB <kguerroudj@cloudbees.com>
2023-02-23 07:58:40 +00:00
Mustafa Ulu af424b5e64 Turkish localization updates (#7662)
Turkish localisation updates
2023-02-22 16:40:08 +01:00
Jenkins Release Bot a3f31145e6 [maven-release-plugin] prepare for next development iteration 2023-02-21 13:13:46 +00:00
Jenkins Release Bot 936e9f83db [maven-release-plugin] prepare release jenkins-2.392 jenkins-2.392 2023-02-21 13:13:34 +00:00
a6ff3afd42 Added copy to clipboard button to agent launch snippets (#7625)
* Added Copy to clipboard

* Update main.jelly

* Remove trailing spaces

* Update main.jelly

* Update main.jelly

* One copy button per region

Creates a heading over the region to be copied and create a set of
instructions for Unix agents with a different set of instructions
for Windows.  The `curl.exe` call must be different on Windows due to
PowerShell having a `curl` cmdlet that is not compatible with command line
`curl.exe`.

Passed my interactive testing with a session in a secure connection.

* Remove obsolete spaces

---------

Co-authored-by: Mark Waite <mark.earl.waite@gmail.com>
Co-authored-by: Alexander Brandes <mc.cache@web.de>
2023-02-20 07:13:10 -07:00
Ikko Eltociear Ashimine 56ea537a15 Fix typo in element-debug.js (#7663)
intial -> initial
2023-02-20 10:29:23 +01:00
331854268b Update plugins after 2023-02-15 security advisory (#7651)
Co-authored-by: Daniel Beck <daniel-beck@users.noreply.github.com>
Co-authored-by: Mark Waite <mark.earl.waite@gmail.com>
2023-02-18 12:26:27 -07:00
dependabot[bot] 22ade92da5 Bump jenkins-test-harness from 1934.v90a_c07cf5b_21 to 1938.ve4c94459431d (#7657)
Bump jenkins-test-harness

Bumps [jenkins-test-harness](https://github.com/jenkinsci/jenkins-test-harness) from 1934.v90a_c07cf5b_21 to 1938.ve4c94459431d.
- [Release notes](https://github.com/jenkinsci/jenkins-test-harness/releases)
- [Changelog](https://github.com/jenkinsci/jenkins-test-harness/blob/master/docs/CHANGELOG-OLD.md)
- [Commits](https://github.com/jenkinsci/jenkins-test-harness/commits)

---
updated-dependencies:
- dependency-name: org.jenkins-ci.main:jenkins-test-harness
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-18 06:42:02 -07:00
dependabot[bot] 6d4617482a Bump javax-mail-api from 1.6.2-8 to 1.6.2-9 (#7656)
Bumps [javax-mail-api](https://github.com/jenkinsci/javax-mail-api-plugin) from 1.6.2-8 to 1.6.2-9.
- [Release notes](https://github.com/jenkinsci/javax-mail-api-plugin/releases)
- [Commits](https://github.com/jenkinsci/javax-mail-api-plugin/compare/javax-mail-api-1.6.2-8...javax-mail-api-1.6.2-9)

---
updated-dependencies:
- dependency-name: io.jenkins.plugins:javax-mail-api
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-18 06:41:52 -07:00