Mark Waite
166eb00a52
Minor updates to MAINTAINERS doc ( #7643 )
2023-03-12 13:01:26 +01:00
af09d67bb4
[JENKINS-69853] User experimental flags ( #7299 )
...
* [JENKINS-69853] User experimental flags
* Applying feedbacks from Tim
* Improve default wording + padding + title
* Remove the "UI"
* Correct Spotbugs
---------
Co-authored-by: Alexander Brandes <mc.cache@web.de >
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com >
2023-03-12 10:52:04 +01:00
6c076b99bf
[JENKINS-69955] Make websocket connection idleTimeout configurable ( #7670 )
...
* [JENKINS-69955] Make websocket connection idleTimeout configurable and adjust the default
* [JENKINS-69955] Do not cache JettyWebSocketServerContainer
* [JENKINS-69955] AtomicBoolean is not needed
* [JENKINS-69955] remove unused import
---------
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com >
Co-authored-by: Alexander Brandes <mc.cache@web.de >
2023-03-12 10:44:53 +01:00
dependabot[bot] and Tim Jacomb
f54693d102
Bump spotless-maven-plugin from 2.33.0 to 2.34.0 ( #7683 )
...
Bumps [spotless-maven-plugin](https://github.com/diffplug/spotless ) from 2.33.0 to 2.34.0.
- [Release notes](https://github.com/diffplug/spotless/releases )
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md )
- [Commits](https://github.com/diffplug/spotless/compare/lib/2.33.0...lib/2.34.0 )
---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com >
2023-03-12 10:42:20 +01:00
dependabot[bot]
eed7766a50
Bump antisamy-markup-formatter from 155.v795fb_8702324 to 159.v25b_c67cd35fb_ ( #7694 )
...
Bump antisamy-markup-formatter
Bumps [antisamy-markup-formatter](https://github.com/jenkinsci/antisamy-markup-formatter-plugin ) from 155.v795fb_8702324 to 159.v25b_c67cd35fb_.
- [Release notes](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/releases )
- [Changelog](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jenkinsci/antisamy-markup-formatter-plugin/commits )
---
updated-dependencies:
- dependency-name: org.jenkins-ci.plugins:antisamy-markup-formatter
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-12 10:41:15 +01:00
Alexander Brandes
f9e3131c02
Fix RunRangeCommand2Test#dummyRangeShouldSuccessEvenTheBuildIsRunning on macOS ( #7706 )
...
Fix RunRangeCommand2Test on macOS
2023-03-12 10:40:57 +01:00
Alexander Brandes
1cbc0cabe8
[JENKINS-70647] Fix hudson.util.ProcessTreeTest#considersKillingVetosOnSlave on macOS ( #7704 )
...
[JENKINS-70647] Fix hudson.util.ProcessTreeTest on macOS
2023-03-12 10:39:44 +01:00
renovate[bot]
cbbf52a4c6
Update dependency eslint-config-prettier to v8.7.0 ( #7699 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-12 10:38:32 +01:00
Alexander Brandes
5b6e14dfe3
[JENKINS-70646] Fix hudson.cli.ConsoleCommandTest on macOS ( #7705 )
...
[JENKINS-70646] Fix hudson.cli.ConsoleCommandTest on macOS
2023-03-12 10:36:40 +01:00
renovate[bot]
5507c9260f
Update dependency mini-css-extract-plugin to v2.7.3 ( #7708 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-12 10:36:18 +01:00
renovate[bot]
1506e1a3a3
Update dependency node to v18.15.0 ( #7711 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-12 10:35:16 +01:00
Alexander Brandes
6e91af0542
Move renovate configuration to .github folder ( #7710 )
...
Move renovate configuration to .github folder
2023-03-11 00:19:54 +01:00
renovate[bot]
953319e6e6
Update dependency node to v18.14.2 ( #7682 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-10 22:04:42 +00:00
Jesse Glick
3a07a2c2f8
Make StopBuildsCommand work even if the last build is not running ( #7679 )
2023-03-10 22:04:37 +00:00
Jan Faracik
a1f732f218
Add copy button to Jenkins home directory ( #7678 )
2023-03-10 22:04:20 +00:00
renovate[bot]
07b266d1e4
Update dependency eslint to v8.35.0 ( #7685 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-03-10 22:04:11 +00:00
Jan Faracik and Tim Jacomb
714574cf74
Simplify settings names ( #7661 )
...
Co-authored-by: Tim Jacomb <21194782+timja@users.noreply.github.com >
2023-03-10 22:03:39 +00:00
Jan Faracik
e129c5e465
Remove config-scrollspy/config-tabbar ( #7688 )
2023-03-10 22:03:22 +00:00
Daniel Beck
acc8d15022
It's called update site, not central plugin repository ( #7697 )
2023-03-10 22:03:12 +00:00
dependabot[bot]
d31acb3c0c
Bump cloudbees-folder from 6.800.v71307ca_b_986b to 6.815.v0dd5a_cb_40e0e ( #7686 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-10 22:02:45 +00:00
Kevin Guerroudj
9d979384e7
Merge March 8 security tests into their main class ( #7700 )
2023-03-10 22:01:49 +00:00
Jenkins Release Bot
89d37d8ee3
[maven-release-plugin] prepare for next development iteration
2023-03-06 23:01:26 +00:00
Jenkins Release Bot
2fe98001f3
[maven-release-plugin] prepare release jenkins-2.394
jenkins-2.394
2023-03-06 23:01:11 +00:00
Daniel Beck
8ec86287cb
Derestrict VirtualFile#list(String,String,boolean) again
2023-03-05 15:23:59 +01:00
Yaroslav Afenkin
ecccc26a39
Merge branch 'security-master'
2023-02-28 17:03:58 +02:00
Jenkins Release Bot
e41aeaacf4
[maven-release-plugin] prepare for next development iteration
2023-02-28 13:15:16 +00:00
Jenkins Release Bot
9044b4379c
[maven-release-plugin] prepare release jenkins-2.393
jenkins-2.393
2023-02-28 13:15:05 +00:00
dependabot[bot]
a9742213a5
Bump spring-security-bom from 5.8.1 to 5.8.2 ( #7667 )
...
Bumps [spring-security-bom](https://github.com/spring-projects/spring-security ) from 5.8.1 to 5.8.2.
- [Release notes](https://github.com/spring-projects/spring-security/releases )
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-projects/spring-security/compare/5.8.1...5.8.2 )
---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 21:35:00 +01:00
Mark Waite
f0be0ca01f
[JENKINS-21052] Warn user that the copy button requires HTTPS ( #7665 )
...
Warn user that the copy button requires HTTPS
Users that run Jenkins over an unencrypted (HTTP) connection will see
the copy button, but it does not perform a copy. Browsers will only
allow access to the clipboard if the page is in a secure context.
With this change, the text that is displayed when the user clicks the
copy button from an insecure context will alert the user that copy
requires a secure connection.
https://stackoverflow.com/questions/400212/how-do-i-copy-to-the-clipboard-in-javascript
describes the alternatives in more detail.
https://issues.jenkins.io/browse/JENKINS-21052 reported that the copy
button does not work. I've confirmed that it works when using an HTTPS
connection.
2023-02-26 18:48:11 -05:00
dependabot[bot]
bc7f06c9bd
Bump antlr.version from 4.11.1 to 4.12.0 ( #7664 )
...
Bumps `antlr.version` from 4.11.1 to 4.12.0.
Updates `antlr4-maven-plugin` from 4.11.1 to 4.12.0
- [Release notes](https://github.com/antlr/antlr4/releases )
- [Changelog](https://github.com/antlr/antlr4/blob/master/CHANGES.txt )
- [Commits](https://github.com/antlr/antlr4/compare/4.11.1...4.12.0 )
Updates `antlr4-runtime` from 4.11.1 to 4.12.0
- [Release notes](https://github.com/antlr/antlr4/releases )
- [Changelog](https://github.com/antlr/antlr4/blob/master/CHANGES.txt )
- [Commits](https://github.com/antlr/antlr4/compare/4.11.1...4.12.0 )
---
updated-dependencies:
- dependency-name: org.antlr:antlr4-maven-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.antlr:antlr4-runtime
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-25 11:16:57 +01:00
Antoine Neveux and Daniel Beck
93c8e7663e
[JENKINS-70662] Disable browser form validation from submit button ( #7668 )
...
* [JENKINS-70662] Disable browser form validation from submit button
* Update core/src/main/resources/lib/form/submit.jelly
Co-authored-by: Daniel Beck <1831569+daniel-beck@users.noreply.github.com >
---------
Co-authored-by: Daniel Beck <1831569+daniel-beck@users.noreply.github.com >
2023-02-25 05:15:39 -05:00
renovate[bot]
d512f95784
Update babel monorepo to v7.21.0 ( #7671 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-02-25 11:14:33 +01:00
Mark Waite
a7b36ef111
[JENKINS-70599] restore installNecessaryPlugins redirect destination ( #7653 )
...
* Test redirect from installNecessaryPlugins
Jenkins LTS versions prior to 2.375.1 redirected to an existing URL.
Jenkins 2.375.1 - 2.375.3 redirect to a non-existent URL.
Test that the old behavior is restored.
* [JENKINS-70599] restore installNecessaryPlugins redirect destination
The installNecessaryPlugins API end point previously redirected to the
"/updateCenter" URL. When the side bar was added to the plugin
manager, the redirect was changed to "/updates". Unfortunately, there
is no page at "/updates", while there is a page at "/updateCenter".
This restores the redirect for the installNecessaryPlugins API call.
If the redirect is not restored, calls to the API that follow the redirect
fail with a page not found (HTTP 404).
I did not find any callers to that API from inside Jenkins core.
Change introduced in 6db88c3f5b
* Use default HttpClient version
The HttpClient documentation notes that if the default is selected but
not supported, then the client will automatically downgrade to HTTP 1.1.
Browsers only support HTTP 2 over TLS, but that's not a requirement of
the HTTP 2 specification.
https://http2.github.io/faq/#does-http2-require-encryption
* Adjust test timeouts based on actual test results
Tests on ci.jenkins.io showed that installNecessaryPluginsTest completes
as follows:
* 9.4 seconds Windows JDK 17
* 0.8 seconds Linux JDK 11
* 1.0 seconds Linux JDK 17
* 1.1 seconds Linux JDK 19
With those timings, it seems reasonable to set the crumb request to
timeout in not more than 7 seconds and the plugin installation request
to timeout in not more than 20 seconds. That will waste a little less
time in execution if there is a problem and still leaves room for low
performance systems.
* Redirect to newer pluginManager URL
2023-02-25 01:45:23 -05:00
dependabot[bot] and Mark Waite
baca541866
Bump tyrus-standalone-client-jdk from 2.1.2 to 2.1.3 ( #7659 )
...
Bumps tyrus-standalone-client-jdk from 2.1.2 to 2.1.3.
---
updated-dependencies:
- dependency-name: org.glassfish.tyrus.bundles:tyrus-standalone-client-jdk
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mark Waite <mark.earl.waite@gmail.com >
2023-02-24 11:32:50 +01:00
renovate[bot]
aadbfc04c7
Update dependency stylelint to v15.2.0 ( #7669 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-02-24 11:26:04 +01:00
Kevin-CB
554587b06d
[SECURITY-3058]
2023-02-23 07:59:19 +00:00
Kevin-CB
d034626fd5
[SECURITY-2399]
2023-02-23 07:59:13 +00:00
Yaroslav Afenkin
59ac866d99
[SECURITY-3037]
2023-02-23 07:59:06 +00:00
Daniel Beck
b70f4cb589
[SECURITY-3030]
2023-02-23 07:59:00 +00:00
Kevin-CB
f39c11fa27
[SECURITY-2823]
2023-02-23 07:58:53 +00:00
Jeff Thompson
40663588ee
[SECURITY-2120]
2023-02-23 07:58:46 +00:00
Jeff Thompson and Kevin-CB
80452662b3
[SECURITY-1807]
...
Co-authored-by: Kevin-CB <kguerroudj@cloudbees.com >
2023-02-23 07:58:40 +00:00
Mustafa Ulu
af424b5e64
Turkish localization updates ( #7662 )
...
Turkish localisation updates
2023-02-22 16:40:08 +01:00
Jenkins Release Bot
a3f31145e6
[maven-release-plugin] prepare for next development iteration
2023-02-21 13:13:46 +00:00
Jenkins Release Bot
936e9f83db
[maven-release-plugin] prepare release jenkins-2.392
jenkins-2.392
2023-02-21 13:13:34 +00:00
a6ff3afd42
Added copy to clipboard button to agent launch snippets ( #7625 )
...
* Added Copy to clipboard
* Update main.jelly
* Remove trailing spaces
* Update main.jelly
* Update main.jelly
* One copy button per region
Creates a heading over the region to be copied and create a set of
instructions for Unix agents with a different set of instructions
for Windows. The `curl.exe` call must be different on Windows due to
PowerShell having a `curl` cmdlet that is not compatible with command line
`curl.exe`.
Passed my interactive testing with a session in a secure connection.
* Remove obsolete spaces
---------
Co-authored-by: Mark Waite <mark.earl.waite@gmail.com >
Co-authored-by: Alexander Brandes <mc.cache@web.de >
2023-02-20 07:13:10 -07:00
Ikko Eltociear Ashimine
56ea537a15
Fix typo in element-debug.js ( #7663 )
...
intial -> initial
2023-02-20 10:29:23 +01:00
331854268b
Update plugins after 2023-02-15 security advisory ( #7651 )
...
Co-authored-by: Daniel Beck <daniel-beck@users.noreply.github.com >
Co-authored-by: Mark Waite <mark.earl.waite@gmail.com >
2023-02-18 12:26:27 -07:00
dependabot[bot]
22ade92da5
Bump jenkins-test-harness from 1934.v90a_c07cf5b_21 to 1938.ve4c94459431d ( #7657 )
...
Bump jenkins-test-harness
Bumps [jenkins-test-harness](https://github.com/jenkinsci/jenkins-test-harness ) from 1934.v90a_c07cf5b_21 to 1938.ve4c94459431d.
- [Release notes](https://github.com/jenkinsci/jenkins-test-harness/releases )
- [Changelog](https://github.com/jenkinsci/jenkins-test-harness/blob/master/docs/CHANGELOG-OLD.md )
- [Commits](https://github.com/jenkinsci/jenkins-test-harness/commits )
---
updated-dependencies:
- dependency-name: org.jenkins-ci.main:jenkins-test-harness
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-18 06:42:02 -07:00
dependabot[bot]
6d4617482a
Bump javax-mail-api from 1.6.2-8 to 1.6.2-9 ( #7656 )
...
Bumps [javax-mail-api](https://github.com/jenkinsci/javax-mail-api-plugin ) from 1.6.2-8 to 1.6.2-9.
- [Release notes](https://github.com/jenkinsci/javax-mail-api-plugin/releases )
- [Commits](https://github.com/jenkinsci/javax-mail-api-plugin/compare/javax-mail-api-1.6.2-8...javax-mail-api-1.6.2-9 )
---
updated-dependencies:
- dependency-name: io.jenkins.plugins:javax-mail-api
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-18 06:41:52 -07:00