We just released security updates to Jenkins, versions 2.146 and 2.138.2, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. Further improvements In addition to the security fixes listed in the security advisory, we also applied multiple improvements that make future security...

One of the major strengths of Jenkins is its customizability and extensibility. With its plugin ecosystem and long list of (possibly hidden) options, Jenkins can be used for a wide range of use cases. The downside of all this flexibility is that, not knowing how people use Jenkins, we mostly rely on issues filed in our bug tracker to know when things go wrong. And over the...

Once again October has arrived. That means the regular Hacktoberfest event is back! This year it will be the fifth installment. During this one-month hackathon you can support open-source and earn a limited edition swag. On behalf of the Jenkins project, we invite you to participate in Hacktoberfest and to work on the project. We welcome all contributors, regardless of their background and Jenkins experience. Quick start Sign-up to Hacktoberfest on the...

When I first wrote about Jenkins Evergreen, which was then referred to as "Jenkins Essentials", I mentioned a number of future developments which in the subsequent months have become reality. At this year’s DevOps World - Jenkins World in San Francisco, I will be sharing more details on the philosophy behind Jenkins Evergreen, show off how far we have come, and discuss where we’re going with this radical distribution of...

Hi all, this is my first blogpost on jenkins.io. My name is Kseniia Nenasheva, I work as a Graphics Designer at CloudBees. I have been using Jenkins since 2012 as a QA engineer, and I am happy to contribute to the project. I have also submitted some patches to the core and plugins, and probably you have seen some Jenkins logos created by me, and some of you may...

Next week Olivier Vernin from CloudBees and Brian Benz from Microsoft will be presenting a session at DevOps World | Jenkins World about how Microsoft has been working with Jenkins to build Jenkins plugins and produce Jenkins on Microsoft Azure. These plugins run Jenkins on Azure Linux and Windows VMs, Kubernetes, azure App service, as well as deploy artifacts to those Azure platforms and more. All...

This is a guest post by DevOps World | Jenkins World speaker Mandy Hubbard. At long last, the way we build and deploy software is finally changing and significantly so. The days of the persnickety, prima donna build machine where monolithic applications were built, tested, and deployed are numbered. And that is a "Good Thing (tm)" - a consequence of how we will meet the transformation goals of...

Evergreen is a distribution of Jenkins we are working on that provides an easy to use and automatically upgrading experience. This year at the conference, there will be not just one, but two talks to present Evergreen to the Jenkins community: Continuously Delivering an Easy-to-Use Jenkins with Jenkins Evergreen, by R. Tyler Croy. Safely Upgrading Jenkins Every Single Day, by Baptiste Mathus. Tyler will present the overall Jenkins...