2.426.1

Jenkins 2.426.1

We're excited to announce the release of Jenkins 2.426.1 🎉

This release contains important security fixes:

• https://www.jenkins.io/security/advisory/2023-07-26/
• https://www.jenkins.io/security/advisory/2023-09-20/

Changelog and upgrade guide

See the changelog and upgrade guide to learn about breaking changes and other considerations when updating.

Reporting issues

If you find an issue with this release, please file an issue on Jira, otherwise use the forums if you're unsure that you've encountered an issue.

2.432

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/#v2.432 for the official changelog for this release, or https://www.jenkins.io/changelog-old/#v2.432 for releases older than around 7 months.

🚨 Removed

• Deleted long deprecated and unused UserProperties (#8679) @StefanSpieker

🚀 New features and improvements

• Stop recommending -jnlpUrl (#8639) @basil

🐛 Bug fixes

• Temporary memory leak in FutureImpl.executors (#8640) @jglick

📦 Dependency updates

• Bump org.jenkins-ci.plugins:credentials from 1307.v3757c78f17c3 to 1309.v8835d63eb_d8a_ (#8687) @dependabot
• Bump org.jenkins-ci.main:jenkins-test-harness from 2104.v8d1866dd0ea_f to 2105.v5a_7b_f123294f (#8683) @dependabot

All contributors: @Mysterious-Dev, @StefanSpieker, @basil, @dependabot, @dependabot[bot], @jenkins-release-bot, @jglick, @renovate and @renovate[bot]

2.426.1 RC-2

The second LTS release candidate (RC) for Jenkins 2.426.1 has been published, and is ready to be tested.

Please report issues found in the developer mailing list thread.

Final release is scheduled for 2023-11-15.

Download the RC from Artifactory.

After final release, the official changelog and official upgrade guide will be available on www.jenkins.io/download.

2.431

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/#v2.431 for the official changelog for this release, or https://www.jenkins.io/changelog-old/#v2.431 for releases older than around 7 months.

🚨 Removed

• JENKINS-60866 - JENKINS-71797 - Remove timeline widget (#6869) @daniel-beck

🚀 New features and improvements

• JENKINS-60866 - JENKINS-71797 - Remove timeline widget (#6869) @daniel-beck
• Log Errors from SlaveComputer._connect (#8675) @jglick
• JENKINS-72252 - Warn 12 months and 3 months before end of Java support (#8661) @MarkEWaite
• JENKINS-72266 - Upgrade Winstone from 6.14 to 6.16 (upgrade Jetty from 10.0.17 to 10.0.18 (#8666) @basil

📦 Dependency updates

• JENKINS-72266 - Upgrade Winstone from 6.14 to 6.16 (upgrade Jetty from 10.0.17 to 10.0.18 (#8666) @basil

All contributors: @MarkEWaite, @Mysterious-Dev, @basil, @daniel-beck, @dependabot, @dependabot[bot], @jenkins-release-bot, @jglick, @renovate and @renovate[bot]

2.430

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/#v2.430 for the official changelog for this release, or https://www.jenkins.io/changelog-old/#v2.430 for releases older than around 7 months.

🚀 New features and improvements

• Fix issues with help texts under security configuration (#8630) @mustafau
• Bump org.jenkins-ci.main:remoting from 3181.v78543a_987053 to 3186.vc3b_7249b_87eb_ (#8643) @dependabot

🐛 Bug fixes

• JENKINS-72189 - fix drag&drop handle for existing repeatables (#8613) @mawinter69
• JENKINS-72222 - Fix inconsistent wording between login page and security configuration (#8633) @mustafau

🌐 Localization and translation

• Turkish localization fixes for build page (#8651) @mustafau
• Fix issues with help texts under security configuration (#8630) @mustafau
• Turkish localization fixes for login and users management pages (#8631) @mustafau

📦 Dependency updates

• Bump org.jenkins-ci:jenkins from 1.106 to 1.107 (#8660) @dependabot
• Bump org.jenkins-ci.plugins:credentials from 1304.v5ec13eecef46 to 1307.v3757c78f17c3 (#8655) @dependabot
• Bump org.jenkins-ci.plugins:credentials from 1293.vff276f713473 to 1304.v5ec13eecef46 (#8650) @dependabot
• Bump com.github.eirslett:frontend-maven-plugin from 1.14.0 to 1.14.2 (#8648) @dependabot
• Bump org.jenkins-ci.main:remoting from 3181.v78543a_987053 to 3186.vc3b_7249b_87eb_ (#8643) @dependabot
• Bump org.jenkins-ci.main:jenkins-test-harness from 2090.v6d1706e434a_b_ to 2096.vcfd8fa_a_67f86 (#8642) @dependabot

All contributors: @MarkEWaite, @dependabot, @dependabot[bot], @jenkins-release-bot, @jglick, @mawinter69, @mustafau, @renovate and @renovate[bot]

2.426.1 RC-1

The first LTS release candidate (RC) for Jenkins 2.426.1 has been published, and is ready to be tested.

Please report issues found in the developer mailing list thread.

Final release is scheduled for 2023-11-15.

Download the RC from Artifactory.

After final release, the official changelog and official upgrade guide will be available on www.jenkins.io/download.

2.429

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/#v2.415 for the official changelog for this release, or https://www.jenkins.io/changelog-old/#v2.415 for releases older than around 7 months.

🚀 New features and improvements

• JEP-237 - Do not support shortening of HMAC code on FIPS mode (#8612) @SujathaH

🐛 Bug fixes

• JENKINS-72203 - Revert #8565 (#8637) @basil
• JENKINS-72181 - Restore flushed output for 'groovy' CLI command (#8622) @daniel-beck
• JENKINS-72179 - Show description of boolean build parameter values (#8606) @daniel-beck

📦 Dependency updates

• Bump mina-sshd.version from 2.10.0 to 2.11.0 (#8625) @dependabot

All contributors: @StefanSpieker, @SujathaH, @basil, @daniel-beck, @dependabot, @dependabot[bot], @jenkins-release-bot, @jglick, @mustafau, @renovate and @renovate[bot]

2.414.3

What's Changed

• Backporting for 2.414.3 by @krisstern in #8542
• Stop testing Java 19 on stable-2.414 branch by @MarkEWaite in #8598
• [JENKINS-72156] Backport Upgrade to Winstone 6.14 which contains an upgrade to Jetty 10.0.17 by @olamy in #8592

Full Changelog: jenkins-2.414.2...jenkins-2.414.3

2.428

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/#v2.428 for the official changelog for this release, or https://www.jenkins.io/changelog-old/#v2.428 for releases older than around 7 months.

🚀 New features and improvements

• Add telemetry for Jenkins uptime (#8596) @daniel-beck
• JENKINS-72156 - Upgrade to Winstone 6.14 which contains an upgrade to Jetty 10.0.17 (#8587) @olamy

🐛 Bug fixes

• JENKINS-72170 - fix nested hetero-list entries with mixture of inputs and buttons (#8602) @mawinter69
• JENKINS-72020 - Restore ability to reorder clouds (#8492) @Vlatombe

🌐 Localization and translation

• JENKINS-72148 - Add missing fr properties in hudson directory (#8586) @jgreffe
• JENKINS-72148 - Add missing fr properties for win32errors (#8594) @jgreffe
• JENKINS-72148 - Add missing fr properties in package jenkins (#8595) @jgreffe
• JENKINS-72143 - French translation (#8578) @jgreffe
• JENKINS-72141 - French translation (#8577) @jgreffe

👷 Changes for plugin developers

• JENKINS-72107 - Introduce Loadable interface (#8544) @Vlatombe
• JENKINS-72111 - Allow Lifecycle to load implementations from plugins (#8589) @jglick
• JENKINS-72156 - Upgrade to Winstone 6.14 which contains an upgrade to Jetty 10.0.17 (#8587) @olamy

📦 Dependency updates

• Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 (#8615) @dependabot
• Bump org.jenkins-ci.main:remoting from 3160.vd76b_9ddd10cc to 3174.v2c9e67f8f9df (#8614) @dependabot

All contributors: @Vlatombe, @abhishekmaity, @basil, @daniel-beck, @dependabot, @dependabot[bot], @jenkins-release-bot, @jglick, @jgreffe, @mawinter69, @olamy, @renovate and @renovate[bot]

2.427

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/#v2.427 for the official changelog for this release, or https://www.jenkins.io/changelog-old/#v2.427 for releases older than around 7 months.

🚀 New features and improvements

• JENKINS-71971 - JEP-237 - FIPS-140 compliant version of HudsonPrivateSecurityRealm (#8393) @divyasivasamy
• JEP-237 - Disable usage stats in fips mode (#8483) @jtnord

🐛 Bug fixes

• JENKINS-71937 - Fix deprecated Slave constructor (#8564) @Vlatombe
• JENKINS-71252 - JENKINS-70793 - Multiple form validation fixes (#8422) @daniel-beck

👷 Changes for plugin developers

• JENKINS-72114 - Fix serialization of HudsonPrivateSecurityRealm.UserDetailsImpl (#8557) @Vlatombe
• JENKINS-41516 - Add script console listener (#7056) @daniel-beck
• JENKINS-71971 - JEP-237 - FIPS-140 compliant version of HudsonPrivateSecurityRealm (#8393) @divyasivasamy

All contributors: @D3SOX, @Kevin-CB, @NotMyFault, @Vlatombe, @daniel-beck, @dependabot, @dependabot[bot], @divyasivasamy, @jenkins-release-bot, @jtnord, @renovate and @renovate[bot]