Introduction Bots are used to automate tasks in a plugin. The Plugin Health Scoring System tracks usage of two bots - Dependabot and Renovate. Dependabot looks for dependencies that are outdated in a plugin. It can also raise a security alert if a security breach is found, like when the…
Once again, Hacktoberfest is back! During this October event, everyone can celebrate and support open source by contributing changes. This year’s edition is special because it is Hacktoberfest’s tenth anniversary. Once again, the Jenkins community will participate in the event, and we invite you to contribute to Jenkins projects. We…
Key Takeaways Jenkins project reports growth of 79% in Jenkins Pipeline, used to propel software delivery. Contributed by: Wadeck Follonier Andrea Chiera completed his 3 months internship within the Security team, auditing 100 plugins and finding 20+ vulnerabilities. Summer Internship in Jenkins security Thank you very much for your involvement…
Introduction The Incremental Build Detection Probe was developed as a part of Google Summer of Code 2023 for the plugin health scoring system project. Incremental builds aid in continuous delivery of plugins, deploying only the modules affected by new commits [1]. Jenkins core and plugins can be deployed incrementally, rather…
This blog showcases all the work done in the project Building Jenkins.io with Alternative Tools during Google Summer of Code 2023. Table of Contents About Project Coding Phase 1 Coding Phase 2 Future Improvements Acknowledgments Useful Links About Project The Jenkins documentation site is generated as a static website using…
Introduction In the modern software development landscape, continuous integration (CI) and continuous deployment (CD) are no longer just trendy buzzwords. They are vital components of the development cycle. Two tools that are often associated with these operations are Jenkins and Mergify. Jenkins, an open-source automation server, is used to automate…
Following up on my previous post about removing Prototype from Jenkins, Prototype has been removed from the 2.426 weekly release and will be removed from the November LTS release. This removal required changes in about 60 plugins. Use the Plugin Manager to upgrade all plugins before and after upgrading to…
Key Takeaways JDK21 is around the corner Contributed by: Wadeck Follonier A plugin security advisory was published on September 6. Security Advisory 2023-09-06 This included multiple high score vulnerabilities in various plugins. A core security advisory was published on September 20. Security Advisory 2023-09-20 Multiple vulnerabilities were corrected in core.…
Short story long As of October 24th, there is a new tab named Health Score on each plugin page of plugins.jenkins.io. This new tab provides the plugin’s health score, along with every aspect that contributed to its score. The score is meant to be unbiased and all plugins are evaluated…
. Prologue Here’s a brief account of my journey to update my Jenkins Servers. Think of this as a "back of the napkin" guide that I used to research and upgrade my Jenkins Servers, which had been left unattended for far too long. I know many of you are seasoned…