The Jenkins Blog

Damien DUPORTAL

Damien is the Jenkins Infrastructure officer and a software engineer at CloudBees working as a Site Reliability Engineer for the Jenkins Infrastructure project. Not only he is a decade-old Hudson/Jenkins user but also an open-source citizen who participates in Updatecli, Asciidoctor, Traefik and many others.

New Update Center (updates.jenkins.io) Architecture in Production: 18 November 2024

Summary (TL;DR) Note: this is a follow up of the 07 and 08 November 2024 24-hour brownout. The service https://updates.jenkins.io will switch its implementation to the new system, on Monday 18 November 2024 at 09:00 am UTC. All Jenkins users are impacted but should not see any functional change. ⚠️ Please check that your organization respects the advertised DNS TTL or you might be...

Damien DUPORTAL
Stéphane Merle November 16, 2024
Brownout on Update Center (updates.jenkins.io): 24 and 25 October 2024

Summary (TL;DR) Note: this is a follow up of the 26 and 27 September 24 hours brownout. The service https://updates.jenkins.io will switch its implementation to a new system during 1 day: From Thursday 24 October 2024 from 10:00am UTC until Friday 25 October 2024 10:00am UTC All Jenkins users are impacted but should not see any functional change. ⚠️ Please, check that your organization respects...

Damien DUPORTAL October 24, 2024
Brownout on Update Center (updates.jenkins.io): 6 and 9 September 2024

Summary (TL;DR) The service https://updates.jenkins.io will switch its implementation to a new system during 1 hour twice: Friday 6 September 2024 from 07:00am UTC until 08:00am UTC Monday 9 September 2024 from 02:00pm UTC until 03:00pm UTC All Jenkins users are impacted but should not see any functional change. ⚠️ Please, check that your organization respects the advertised DNS TTL or you might be stuck...

Damien DUPORTAL September 4, 2024
Thanks to the Jenkins mirror providers

Jenkins downloads are provided by mirror servers of organizations that support the Jenkins project. You can see the list from the mirror status page. We’re really grateful for all the support provided by the organizations behind the curtain, namely: Oregon State University Open Source Lab in USA Tsinghua University in China XMission in USA Belnet in Belgium RWTH Aachen University in Germany The Yamagata University in Japan FreeDif open...

Damien DUPORTAL June 13, 2024
Jenkins 2023 Recap

Contributed by: Wadeck Follonier The Jenkins Security team has multiple missions, with the most visible to users being the publication of advisories. In 2023, the team published 17 advisories: 4 included Jenkins core, and 13 were solely about plugins. In total, 211 vulnerabilities were announced. In terms of reporting trends, we have seen an increase in people reporting CVEs originating from dependencies. Our position on...

Damien DUPORTAL
Mark Waite
Bruno Verachten
Wadeck Follonier
Kevin Martens
Alyssa Tong January 25, 2024
Jenkins November 2023 Newsletter

Key Takeaways Basil Crow joins the Jenkins Governance Board. A Jenkins Contributor Summit will be held prior to FOSDEM. The Contributor Spotlight site is now live. Contributed by: Mark Waite Basil Crow joins the Jenkins governance board in December 2023. He’ll serve for a two-year term. Thanks to Basil for his willingness to serve. More details of the 2023 governance board and officer changes are available in a...

Damien DUPORTAL
Mark Waite
Bruno Verachten
Kevin Martens
Alyssa Tong December 15, 2023
Jenkins October 2023 Newsletter

Key Takeaways JDK21 is available on the infrastructure and in official Docker images too. 💥Breaking change: set Java 17 as default for LTS. Prototype has been removed as of weekly 2.426 Contributed by: Wadeck Follonier Core security advisory published on October 18 https://jenkins.io/security/advisory/2023-10-18/ Includes an essential Jetty update that provided multiple fixes. Plugin security advisory published on October 25 https://jenkins.io/security/advisory/2023-10-25/ Multiple high score vulnerabilities in various plugins During Hacktoberfest, the Content...

Damien DUPORTAL
Mark Waite
Bruno Verachten
Wadeck Follonier
Kevin Martens
Alyssa Tong November 10, 2023
Jenkins September 2023 Newsletter

Key Takeaways JDK21 is around the corner Contributed by: Wadeck Follonier A plugin security advisory was published on September 6. Security Advisory 2023-09-06 This included multiple high score vulnerabilities in various plugins. A core security advisory was published on September 20. Security Advisory 2023-09-20 Multiple vulnerabilities were corrected in core. This advisory also included fixes for a plugin. Contributed by: Mark Waite Voter registration is now open for the 2023 Jenkins...

Damien DUPORTAL
Mark Waite
Bruno Verachten
Wadeck Follonier
Kevin Martens
Alyssa Tong October 12, 2023
Jenkins August 2023 Newsletter

Key Takeaways Jenkins project reports growth of 79% in Jenkins Pipeline, used to propel software delivery. Contributed by: Wadeck Follonier Andrea Chiera completed his 3 months internship within the Security team, auditing 100 plugins and finding 20+ vulnerabilities. Summer Internship in Jenkins security Thank you very much for your involvement and also to the team for mentoring him. A Plugin security advisory was published on August...

Damien DUPORTAL
Mark Waite
Bruno Verachten
Wadeck Follonier
Kevin Martens
Alyssa Tong September 21, 2023