Last year, news of compromised passwords being used for accounts able to distribute NPM packages made the rounds. Their system looks similar to how publishing of plugins works in the Jenkins project: Accounts are protected by passwords chosen by users. Individual contributors have permission to release the components they maintain. The components they release are used by millions of developers around the world to deliver their software. In other...

We are excited to share and invite the community to join us on a project we’ve been thinking about over the last few months called Jenkins X which extends the Jenkins ecosystem to solve the problem of automating CI/CD in the cloud. Background The last few years have seen massive changes in the software industry: use of immutable container images for distributing software which are smaller, easier...

This is a post about a major change in Jenkins, which is available starting from Jenkins 2.102 and Jenkins LTS 2.107.1. This is a change with a serious risk of regressions in plugins. If you are a Jenkins administrator, please read this blogpost and upgrade guidelines BEFORE upgrading. I would like to provide some heads-up about the JEP-200 change, which is included into the new Jenkins LTS 2.107.x baseline. Background For many years Jenkins...

Over the last year, several efforts were done on jenkins.io like security advisories or documentation and I wanted to understand the impact it had on its traffic. I had a look to the Google Analytics account used for jenkins.io and it was interesting to discover which browsers are used by Jenkins visitors and how this compares with other websites. So I decided to analyze one year of data from January...

You’ve marked your calendar to alert you weeks in advance of the CFP deadline. You’ve spent your nights and weekends to skillfully craft your abstract and you are convinced this is THE one. You confidently clicked the 'submit' button only to find out weeks later you’ve received an automated declined email. On top of feeling disappointed, you probably wondered why your proposal was turned down. As Jenkins World CFP is...

Table of Contents Introducing "Project Cheetah" Yes, but what does it DO? How Do I Set Speed/Durability Settings? 1. Globally, you can choose a global default durability setting: 2. Each Pipeline can get a custom Durability Setting: 3. Multibranch Projects can use a new BranchProperty to customize the Durability Setting. Will Performance-Optimized Mode Help Me? Other Goodies How Did You Do It? What Next? This is a guest post by Sam Van Oort, Software Engineer at...

We are happy to announce that Jenkins project has been accepted to Google Summer of Code 2018. This year we invite students and mentors to join the Jenkins community and work together on various initiatives: core, plugins, development tools and infrastructure. Our mentors have already created some project ideas. For example, you are welcome to work on the new Configuration-as-Code initiative or to help creating standard API for Code Coverage...

We just released security updates to Jenkins, versions 2.107 and 2.89.4, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. While the severity score works out as medium for all the vulnerabilities, we strongly recommend that anyone operating publicly accessible Jenkins...