Extension point for secure users of REST API. See the Secure Requester Whitelist plugin.
Make CLI interface help more accesible
Channel's executorService's pool should have a name
Better diagnosability for remoting StreamCorruptedException.
Added @DataBoundSetter annotation for easier compatibility when changing fields in a form-bound object.
Support indexed annotations (like @Restricted) on constructors.
Several security vulnerabilities were fixed.
Using jenkins-cli connecting to HTTPS port fails due to hostname mismatch in certificate
Builds disappear some time after renaming job
CannotResolveClassException breaks loading of entire containing folder, not just one job
HTTP two-way remoting does not work (jenkins-cli.jar without JNLP)
you cannot use the cli without giving Overall read to Anonymous
HTML metacharacters not escaped in log messages
Too many open files upon HTTP listener init or shutdown
PeriodicWork can block timer thread; use ScheduledExecutorService instead
ListView.expand throws ClassCastException: … cannot be cast to hudson.model.TopLevelItem
Workspaces seem to be removed prematurely on concurrent jobs
Slave launcher fails after NoClassDefFoundError: Could not initialize class jenkins.model.Jenkins$MasterComputer
Linkage error in InitializerFinder.discoverTasks blocks startup
'Apply' error screens don't work
Loading projects too slow because of File.isDirectory calls
l:breakable mishandles HTML metacharacters
Blocking a possible way in which test result notations in build records could break loading of those builds.
Fail to run 'groovysh' in CLI due to insufficient permission
NPE during shutdown in functional tests
RingBufferLogHandler throws ArrayIndexOutOfBoundsException after int-overflow
Disable\Delete "Remember me on this computer" check box in login screen
Switching to official fix of jzlib bug rather than using an attempted workaround.
Start JNLP slave ignores jar-cache flag
Partial fix of misleading error messages from web container.
HTTP Content-Range Header one byte past file length and missing "bytes" unit
No longer uselessly bundling Apache Ant in the remoting JAR.