Fixes the security issues described in the advisory.
Upgraded Jenkins OSS LTS from
Upgraded Blue Ocean Plugin from
Upgraded Common API for Blue Ocean from
Upgraded Config API for Blue Ocean from
Upgraded Dashboard for Blue Ocean from
Upgraded Events API for Blue Ocean from
Upgraded Git Pipeline for Blue Ocean from
Upgraded GitHub Pipeline for Blue Ocean from
Upgraded i18n for Blue Ocean from
Upgraded JWT for Blue Ocean from
Upgraded Personalization for Blue Ocean from
Upgraded Pipeline REST API for Blue Ocean from
Upgraded Blue Ocean Pipeline Editor from
Upgraded Pipeline SCM API for Blue Ocean from
Upgraded REST API for Blue Ocean from
Upgraded REST Implementation for Blue Ocean from
Upgraded Web for Blue Ocean from
Upgraded Bouncy Castle API Plugin from
Upgraded Branch API Plugin from
Upgraded Bitbucket Branch Source Plugin from
Upgraded CloudBees Folders Plus Plugin from
Upgraded CloudBees License Manager from
Upgraded CloudBees Monitoring Plugin from
Upgraded CloudBees SSH Build Agents Plugin from
Upgraded CloudBees Support Plugin from
Upgraded CloudBees Docker Pipeline Plugin from
Upgraded Favorite Plugin from
Upgraded Git Plugin from
Upgraded GitHub API Plugin from
Upgraded GitHub Branch Source Plugin from
Upgraded LDAP Plugin from
Upgraded Maven Plugin from
Upgraded Mercurial Plugin from
Upgraded CloudBees Openshift CLI plugin from
Upgraded Operations Center Analytics Configuration from
Upgraded Operations Center Analytics Reporter Plugin from
Upgraded Operations Center Context Plugin from
Upgraded Pipeline Graph Analysis Plugin from
Upgraded Pipeline: Model API from
Upgraded Pipeline: Model Definition from
Upgraded Pipeline: Declarative Extension Points API from
Upgraded Pipeline Rest API Plugin from
Upgraded Pipeline: Stage Tags Metadata from
Upgraded Pipeline Stage View Plugin from
Upgraded Promoted Builds Plugin from
Upgraded SCM API Plugin from
Upgraded Script Security Plugin from
Upgraded Pipeline API Plugin from
Upgraded Pipeline Basic Steps Plugin from
Upgraded Pipeline Groovy Plugin from
Upgraded Pipeline Job Plugin from
Upgraded Pipeline: Step API from
Upgraded Pipeline Supporting APIs Plugin from
Added apache-httpcomponents-client-4-api version
Added blueocean-bitbucket-pipeline version
Added blueocean-jira version
Added CloudBees Blue Ocean Default Theme version
Added cloudbees-jenkins-advisor version
Added htmlpublisher version
Added jira version
Added jsch version
When using Operations Center SSO, user scoped credentials created by the Blue Ocean Pipeline Creation Wizard gets deleted upon re-authentication. The workaround is to manually re enter the git/github credentials on the Client Master, either globally or at the folder level.
Dependencies to plugins which were previously bundled on Jenkins WAR (detached plugins) are not resolved automatically. These plugins will have to be manually installed. More information JENKINS-37545.
When renaming a folder, if clicking
Apply instead of
Save, a confirmation pop-up dialog is shown with duplicated header and footer. The workaround is to use the
When a Client Master is straight deleted from a CJOC, the connection details are left behind. The workaround is to delete the CJOC connection details from the Client Master global configuration page.
When pushing connection details from CJOC to a clean CJE (along with SSO), the user gets logged in the Client Master as admin rather than as the user who started the configuration in CJOC. The workaround is to logout and login again.
When CJOC is enforcing the Role Based Access Control authorization strategy on client masters, the Groups detail screens on client masters will include two "Inherited from Jenkins" sections. The top-most section refers to the current master (which is a "Jenkins" but should be referred to as the connected master name shown in the breadcrumb bar) and the lowest "Inherited from Jenkins" section refers to CJOC (which is a "Jenkins").
The visual display of the information is less confusing when the masters have been organized using folders on CJOC as then the two "Inherited from Jenkins" sections are visually separated by the folders.
The list of Job types in the
New Item page is served without cache expiration.
This causes IE to cache the results of the page so if a new item type should be visible it is not shown until the cache is cleared and the page reloaded. This is known to affect the installation of new plugins that offer job types, changing of Folder restrictions in CloudBees Folders Plus plugin and creating a new Job Template in CloudBees Templates plugin.
Chrome and Firefox are unaffected by this issue.