Changelog

What's new in 2.324 (2021-12-06)

• Improve logging for termination of cloud agents. (pull 6010)
• Fix appearance of table tooltips. (issue 67154)
• Developer: Plugins now have their Guice dependencies aligned with core. (pull 6014)
• Introduced Listeners.notify utility method to encourage safe listener notification. (issue 21224)
• Developer: Disable form element path in unit tests by default. (pull 6004)
• Deprecate FingerprintStorage.getFileFingerprintStorage. Developers should use FingerprintStorage Extension API instead. (pull 5423, FingerprintStorage.getFileFingerprintStorage javadoc, FingerprintStorage Extension API)

What's new in 2.323 (2021-11-30)

• Add configuration-as-code support for managing log recorders. (issue 61278)
• Add path to form elements giving stable selectors for UI testing. (pull 5926)
• Update remoting from 4.11.1 to 4.11.2 to fix code signing. (pull 5983, issue 67227, Remoting 4.11.2 changelog)
• Improve performance by lazy loading build records from the run list. (pull 5942)
• "View as plain text" shows correctly in polling log page. (issue 67193)
• Developer: New extension point Header as an interface that provides capabilities to render a specific header and a default implementation of that, named JenkinsHeader that is enabled by default. (pull 5909, JEP-234: Customizable Jenkins header)

What's new in 2.322 (2021-11-23)

• Issue a warning to the system log when using agent-to-controller file manipulation idioms considered for deprecation, and collect telemetry about this as well. (pull 5890)
• Add descriptions of built-in administrative alerts to the global configuration alert selection page. (pull 5937)
• Modernise System Info and Log Recorder pages. (pull 5925)
• Jenkins startup could hang due to a deadlock in class loading. (issue 67188)
• Display full user name, rather than id, in securityRealm page when using the built-in security realm (regression since 2.243). (pull 5925)
• Display the "Configure System" icon in the drop down menu. (issue 67033)
• Developer: Register UberClassLoader as parallel-capable. (pull 5931)

What's new in 2.321 (2021-11-16)

• Modernise the table design and add support for Ionicons. (pull 5851)
• Remove superfluous user interface elements, including images, mask-icon, and unnecessary resize handles. (pull 5777)
• Only apply trimLabels operation to affected nodes when adding or removing them. (issue 67099)
• Maven tool configuration works again (regression in 2.320). (issue 67109)
• Show ongoing first build in build history (regression in 2.314). (issue 66969)
• Fix filtering in update tab of plugin manager (regression in 2.320). (pull 5908)
• Permit additional safe types in agent to controller access control (regression in 2.320). (issue 67105)
• Developer: Upgrade the Guice library from 4.0 (released April 28, 2015) to 5.0.1 (released March 2, 2021). (pull 5858, Guice library, Guice 5.0.1 release notes)
• Developer: Bump spring-security-bom from 5.5.3 to 5.6.0. (pull 5921, Spring project spring-security 5.6.0-RC1 release notes, Spring project spring-security 5.6.0 release notes)

What's new in 2.320 (2021-11-09)

• Upgrade the Guava library from 11.0.1 (released on January 9, 2012) to 31.0.1 (released on September 27, 2021). Plugins have already been prepared to support the new version of Guava; use the Plugin Manager to upgrade all plugins before and after upgrading Jenkins. (pull 5707, issue 36779, JEP-233, Guava web site, Guava 31.0.1 changelog)
• Modernise the 'New view' and 'New node' pages. (pull 5842)
• Improve artifact list readability in dark theme. (pull 5889)
• Use CSS animation for console progress. (pull 5871)
• Allow plugin upload by URL in addition to file name. (issue 4814)
• Update bundled version of Bouncy Castle API plugin from 2.20 to 2.25. (pull 5898, Bouncy Castle release notes)
• Prevent LinkageError during class loading (regression in 2.309). (issue 66993)
• Do not attempt to canonicalize tar entries when untaring, as the result may be unexpected for symlinks. (issue 67063)
• Fix form submission for file access rules of agent to controller security subsystem (regression in 2.111). (pull 5881, issue 67061, Upgrade guide - Agent to controller path filter security fixes)
• Avoid false positives in plugin search (installed tab). (pull 5870)
• Fix missing hyperlink in build history (regression in 2.314). (issue 67028)
• Add space between icon and project name (or build number) in all links to builds. (pull 5887)
• Add space between icon and project name in upstream & downstream section of project page. (issue 66749)
• Replace outdated URLs with working redirects. (issue 67032)
• An exception thrown by a RestartListener no longer leaves Jenkins in a zombie-like state. (issue 67002)
• Display the time zone of the user when an administrator updates a user account. (issue 66845)
• Developer: Provide a stable version of ObjectWebASM (currently 9.1) on the classpath. (pull 5524, ObjectWebASM web site)
• Developer: Use the upstream version of AntClassLoader without custom patches. (pull 5856)

What's new in 2.319 (2021-11-04)

• Important security fixes. (security advisory)
• Security hardening: Require role check for remoting callables. (LTS upgrade guide, developer documentation)
• Always allow configuring agent-to-controller security subsystem.

What's new in 2.318 (2021-10-26)

• Add XStream2 constructor matching super. (issue 66955)
• Remove deprecated, unsafe classes previously copied from Apache Ant. Docker Slaves plugin is incompatible with this change. (issue 66930)
• ExecutorListener may now be implemented as a static extension. (issue 66947)
• Update tooltips to be consistent across Jenkins. (pull 5763)

What's new in 2.317 (2021-10-19)

• Screen Resolution cookie now has the secure flag set when Jenkins is running on HTTPS. (issue 49675)
• Deprecate the -cp option in the remoting agent.jar command line. Upgrade from Remoting 4.10 to Remoting 4.11. (pull 5821, issue 64831, Remoting 4.11 changelog)
• Display ongoing build in build history (regression in 2.314). (issue 66753)
• Fix agent handshake when connecting over Websocket on Java 11. Upgrade from Remoting 4.10 to Remoting 4.11. (pull 5821, issue 61212, Remoting 4.11 changelog)
• Reduce the amount of disk writes to logs/tasks/*.log when nothing interesting is happening. (issue 66854)

What's new in 2.316 (2021-10-11)

• Update the French translation in the legend. (issue 66681)
• Display full plugin name and link when a plugin fails to load. (issue 66776)
• Improve error reporting for certain kinds of bugs in computer listeners. (pull 5755)
• Update bundled versions of Pipeline: API, Pipeline: Step API, SCM API, and Structs plugins. (pull 5773, Pipeline: API plugin, Pipeline: Step API plugin, SCM API plugin, Structs plugin)
• Developer: Fix XStream2 support of unmarshalling implicit collections. (pull 5757)

What's new in 2.315 (2021-10-06)

• Security fixes. (security advisory)
• Security hardening: The "short description" of build causes is now defined as plain text instead of HTML. (related LTS upgrade guide entry, related developer documentation)

What's new in 2.314 (2021-09-28)

• Modernise the "Build History" search bar (pull 5692)
• Show new status icons in build history (issue 66659)
• Modernise the "Manage Jenkins" screen (pull 5693)

What's new in 2.313 (2021-09-21)

• Allow a plugin to dynamically insert a JAR file into its classpath. (issue 66563)
• Remove the --daemon argument from Jenkins command line arguments. Replace Akuma library from Jenkins core with simpler implementations using ProcessTree capabilities (pull 5561)
• Allow Jenkins to start when the JCasC configuration defines view-related permissions (regression in 2.302). (issue 66470)
• Correction of Label expression including a "implies" relationship without spaces around. (issue 66613)
• WebSocket connections now work when the Jenkins controller is running Java 11 and using self-terminated TLS. (issue 61212)

What's new in 2.312 (2021-09-14)

• Update executable war from 1.45 to 2.0 (pull 5706)
• Replace the old icons with the new SVG icons in the job trend page. (issue 65928)

What's new in 2.311 (2021-09-09)

• Fix wrong parameter type for Text Parameter when triggering a build via the buildWithParameters API call. (pull 5704)
• Graphs now scale correctly on high resolution screens. (pull 5697)
• The checkbox labeled "Enable Agent → Controller Access Control" in the form "Configure Global Security" would always start out as disabled. Submitting the form without checking it would then cause a configuration change (regression in 2.307). (pull 5694)
• Load classes from plugins in parallel for faster startup on multicore machines. (issue 23784)
• Internal: Experimental support for URLClassLoader can be enabled by setting hudson.ClassicPluginStrategy.useAntClassLoader=false. (pull 5698)

What's new in 2.310 (2021-09-07)

• Jenkins 2.310 was not placed in the artifact repository or on the download site.

What's new in 2.309 (2021-08-30)

• Fix missing settings/cog icon in Plugin Manager. Fix incorrect folder icon showing in projects (regression in 2.307). (pull 5690)
• Add ABORTED threshold to ReverseBuildTrigger. (pull 5542)
• Developer: Bump Java Native Access (jna) from 5.8.0 to 5.9.0. (pull 5682, JNA 5.9.0 changelog)
• Internal: AntClassLoader (and its subclass PluginFirstClassLoader) and MaskingClassLoader register themselves as parallel-capable. (pull 5687)
• Upgrade from xstream 1.4.17 to 1.4.18. (pull 5685, issue 66507, XStream 1.4.18)

What's new in 2.308 (2021-08-24)

• Use SVGs over PNGs for the sidebar when possible. Breadcrumb bar/logo/menu items are now correctly aligned on the left together. Move old war/images folder to webapp so they can be used in frontend - the SVGs are now in the webapp/images/svgs folder. (pull 5663)
• Update appearance for feed bar and description button to be modern and consistent. (pull 5664)
• When the buildWithParameter API is called, if the requests with the same parameters in the queue are merged, the http response code of the request uses a more appropriate 303(see other) instead of 201(created). (issue 66105)
• Warn about use of master in a label expression when that's no longer in use. (pull 5674)
• Use full URL character encoding for the generated inbound agent launch string. (pull 5636)
• Use the JVM's default keystore type for the Jenkins server when terminating TLS connections within Jenkins. Used if Jenkins is started with the --httpsPort argument. Winstone 5.21: Update Jetty from 9.4.42.v20210604 to Jetty 9.4.43.v20210629. (pull 5670, issue 66379, Winstone 5.20 changelog, Winstone 5.21 changelog, Jetty 9.4.43 changelog)
• Developer: Bump spring-security-bom from 5.5.1 to 5.5.2. (pull 5672, Spring project spring-security 5.5.2 release notes)

What's new in 2.307 (2021-08-17)

• Replace the term "master" with "controller" (for the main Jenkins application) or "built-in node" in user interface strings and documentation as appropriate. (pull 5425)
• Add migration code to change the node name (e.g. NODE_NAME environment variable) and label of the built-in node only after explicit migration by an administrator. New installations get the new node and label immediately. If a job definition, Pipeline definition, or tool installer reference must be tied to the built-in node, it should use the label "built-in". (Built-In Node Name and Label Migration)
• Add the system property jenkins.model.Jenkins.nodeNameAndSelfLabelOverride to specify a different node name and label for the built-in node (e.g. for Configuration as Code use cases) than the one otherwise determined. This will not affect other uses of the node name, such as the URL to the built-in node (now /computer/(built-in)/). (pull 5425)
• GDSL file in jenkins-core library no longer reports an IllegalStateException when used in IntelliJ IDEA. (pull 5662)
• Improve layout of console output header. (pull 5507)
• Use the SVG version of the Jenkins text logo instead of the PNG. (pull 5660)
• Developer: Jenkins now uses an updated version of the AntClassLoader class with fewer custom patches. (pull 5656)
• Removed: The Woodstox implementation of the StAX API has been removed from Jenkins core. Users of the Azure Artifact Manager, Azure Container Agents, Azure Storage, and Azure SDK API plugins must upgrade those plugins to the latest versions in lockstep with this core upgrade. Plugins that consume Woodstox should depend on it directly or via the Jackson 2 API plugin. (pull 5651, Woodstox implementation, StAX API, Azure Artifact Manager plugin, Azure Container Agents plugin, Azure Storage plugin, Azure SDK API plugin, Jackson 2 API plugin)

What's new in 2.306 (2021-08-10)

• Provide working "Help About" links for Jenkins CLI, Jenkins core, and Jenkins war. (issue 64666)
• Developer: AntClassloader will now ignore files that are part of the classpath but not zip files when scanning for resources. It used to throw an exception. (pull 5650)

What's new in 2.305 (2021-08-03)

• Show tooltips when users hover on the SVG icons. (issue 65923)
• Ability to disable Java 11 administrative monitor with a system property. (issue 66177)
• Developer: Make AntClassLoader multi-release JAR aware when it deals with java.util.jar.JarFile. (pull 5635)

What's new in 2.304 (2021-07-27)

• Fix an issue unzipping archives in a corner case when entries have the same path prefix as the target location. (issue 66094)
• Avoid polluting the log when usage statistics can not be sent. (issue 66139)
• Bump matrix-auth from 2.6.7 to 2.6.8. (pull 5630)
• Bump bundled Ant from 1.10.10 to 1.10.11. (pull 5620)
• Remove support for native JNR (Java Native Runtime) chmod(2) and stat(2) implementations as opposed to NIO (Java non-blocking I/O) via the hudson.Util.useNativeChmodAndMode system property. This system property no longer has any effect. (pull 5606)
• Developer: Allow consumers of XmlFile to disable fsync(2). (pull 5599)
• Internal: Terminology cleanup to fix build time trend's distributed builds. Only show the agent column when the controller has agents defined. (pull 5625)

What's new in 2.303 (2021-07-20)

• Bump commons-compress from 1.20 to 1.21. (pull 5624)
• Bump spring-security-bom from 5.5.0 to 5.5.1. (pull 5598, Spring project spring-security 5.5.1 release notes)

What's new in 2.302 (2021-07-13)

• Optimize access control checks affecting (at least) Pipeline node steps. (pull 5586)
• Developer: The hudson.util.SubClassGenerator and experimental hudson.model.TreeView class have been removed without replacement. (pull 5566, pull 5603)
• Internal: Upgrade from Remoting 4.9 to Remoting 4.10 with bugfixes and dependency updates. (pull 5607, Remoting 4.10 changelog)

What's new in 2.301 (2021-07-06)

• Fix a regression in 2.298 where some plugins (including Azure Storage) could not correctly parse streaming XML output. (pull 5604)
• The Jenkins process management functionality now supports FreeBSD. (pull 5563)
• Bump jenkins from 1.64 to 1.65. (pull 5594)
• Winstone 5.19: Update Jetty from 9.4.41.v20210516 to Jetty 9.4.42.v20210604. (pull 5589, Winstone 5.19 changelog, Jetty 9.4.42 changelog)

What's new in 2.300 (2021-06-30)

• Important security fixes. (security advisory)

What's new in 2.299 (2021-06-22)

• Update stapler from 1539.v2f05ce93882d to 1563.v3da2d02f9572. (pull 5549, Stapler 1539.v2f05ce93882d changelog, Stapler 1563.v3da2d02f9572 changelog)
• Developer: InterceptingExecutorService and its subclasses no longer extend com.google.common.util.concurrent.ForwardingExecutorService or com.google.common.collect.ForwardingObject. (pull 5565)
• Remove jna-posix dependency from Jenkins core. Plugins that use jna-posix functionality must be migrated from jna-posix to jnr-posix. (pull 5560, Maven Repository Scheduled Cleanup plugin, SICCI for Xcode plugin, java.io.tmpdir cleaner plugin)

What's new in 2.298 (2021-06-15)

• Document REST methods to mark an (agent) node temporarily offline and related tasks. (pull 5556)
• Add X-Frame-Options header to AJAX responses. (pull 5555)

What's new in 2.297 (2021-06-08)

• Remove Apache Commons Digester library and related code from the Jenkins core. (pull 5320, issue 65161, announcement and upgrade guidelines)
• Fix incorrect process termination issues when running on macOS. (issue 65195)
• Add check to prevent out of bounds memory access error on macOS. (issue 64347)
• A race condition in class loading could result in a LinkageError. (issue 65766)
• Do not change fonts when artifacts are as shown as a tree. (issue 65751)
• Bump sshd-core from 2.5.1 to 2.7.0 in Jenkins CLI. (pull 5547)

What's new in 2.296 (2021-06-01)

• Fix regressions in forms submissions from unwanted form validation in any browser (regression in 2.289). (issue 65585)
• Recommend running on Java 11. (issue 65577)
• Change the word 'number' to 'integer' in the error message of the number field. (pull 5538)
• Show implied plugin dependencies or a count of dependencies for plugins split from core. (pull 5472)
• Bump spring-security-bom from 5.4.6 to 5.5.0. (pull 5505, Spring project spring-security 5.5.0 release notes)
• Winstone 5.18: Update Jetty from 9.4.40.v20210413 to 9.4.41.v20210516 for bug fixes and enhancements. (pull 5540, Winstone 5.18 changelog, Jetty 9.4.41 changelog)
• A specific and rarely encountered internal error now again correctly shows details about the cause (regression in 2.292). (pull 5537)
• Improve contrast for the checkbox in the login page. (pull 5536)
• Jenkins redirects users to the previous page after login even if they were able to view it while not logged in (regression in 2.266). (issue 64991)
• Developer: View is now a DescriptorByNameOwner allowing its use as AncestorInPath. (pull 5533)
• Remove the Bytecode Compatibility Transformer library and related code from Jenkins core. Developer: Plugins that rely on the hudson.model.Queue$Item#id or hudson.model.AbstractProject#triggers fields must be updated to call the corresponding getters. (pull 5526, Vertx plugin, Slave Prerequisites plugin)
• Developer: Remove JTidy dependency from Jenkins core. Plugins that use JTidy functionality must be updated to explicitly declare a dependency on JTidy rather than relying on Jenkins core to provide this library. (pull 5521, NIS notification lamp plugin)
• Internal: Remove partial (~6% complete) Arabic and Portuguese translations (pull 5518)
• Internal: Upgrade from Remoting 4.8 to Remoting 4.9 with bugfixes and dependency updates. (pull 5539, Remoting 4.9 changelog)

What's new in 2.295 (2021-05-25)

No notable changes in this release.