We just released security updates to Jenkins, versions 2.107 and 2.89.4, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. While the severity score works out as medium for all the vulnerabilities, we strongly recommend that anyone operating publicly accessible Jenkins...

Multiple Jenkins plugins received updates today that fix several security vulnerabilities. Android Lint CCM Credentials Binding JUnit Pipeline: Supporting APIs For an overview of these security fixes, see the security advisory. Subscribe to the jenkinsci-advisories mailing list to receive important future notifications related to Jenkins security....

On the first weekend in February, numerous free and open source developers from around the world will travel to Brussels, Belgium, for arguably the largest event of its kind: FOSDEM. Among the thousands of hackers in attendance will be a number of Jenkins contributors. On the Monday after FOSDEM, you are invited to join a group of those contributors for a full day of hacking on Jenkins. Folks of all...

Overview Recently some UI improvements around the Manage Jenkins page have been introduced. The visual changes are very subtle but behind them, there are interesting benefits. Some of the goals that we have tried to achieve: Applying a semantic HTML Removing the <table> tag usage for implementing layouts and content structures. Read this article if you want to know reasons and/or arguments. Small re-styling focused on spacing, margins, composition,...

Happy 2018! The Jenkins World train is ready to take off once again. As usual, the sign of festivities looming begins with the Call for Papers. Those who attended Jenkins World 2017 know that Jenkins World 2018 is coming back to San Francisco. But what they did not know is that Jenkins World will also be coming to Europe. You read that right,...

There is a newer version of the announcement for Jenkins administrators. Please see this blogpost. Overview JEP-200 has been integrated into Jenkins weekly builds and (if all goes well) will be a part of the next LTS line. In a nutshell, this change is a security hardening measure to be less permissive about deserializing Java classes defined in the Java Platform or libraries bundled with Jenkins. For several years now, Jenkins...

Last week, buddybuild — a hosted continuous integration service focused on mobile apps — announced that it had been acquired by Apple, and consequently its complete Android offering, along with its free tier for iOS users, will be discontinued at the beginning of March. This was a fairly undesirable way to start 2018 for buddybuild’s Android users and, with less than two months to find...

This year the Jenkins project is interested in participating in Google Summer of Code (GSoC). As in 2016/2017, we are looking for mentors. So yes, we are looking for you :) What is GSoC? GSoC is an annual international program which encourages college-aged students to participate with open source projects during the summer break between classes. Students accepted into the program receive a stipend, paid by Google, to work on well-defined projects to...