Fixes the security issues described in the advisory.
Upgraded Jenkins OSS LTS from
Upgraded Bouncy Castle API Plugin from
Upgraded CloudBees Folders Plus Plugin from
Upgraded CloudBees License Manager from
Upgraded CloudBees Monitoring Plugin from
Upgraded CloudBees SSH Build Agents Plugin from
Upgraded CloudBees Support Plugin from
Upgraded CloudBees Update Center Plugin from
Upgraded LDAP Plugin from
Upgraded Maven Plugin from
Upgraded Operations Center Analytics Plugin from
Upgraded Operations Center Analytics Configuration from
Upgraded Operations Center Analytics Dashboards from
Upgraded Operations Center Analytics Feeder from
Upgraded Operations Center Analytics Reporter Plugin from
Upgraded Operations Center Analytics Viewer Plugin from
Upgraded Operations Center Context Plugin from
Upgraded Operations Center JNLP Agent Controller Plugin from
Upgraded Operations Center Server Plugin from
Upgraded Script Security Plugin from
Upgraded Pipeline: Step API from
Added apache-httpcomponents-client-4-api version
Added cloudbees-jenkins-advisor version
Added jsch version
Dependencies to plugins which were previously bundled on Jenkins WAR (detached plugins) are not resolved automatically. These plugins will have to be manually installed. More information JENKINS-37545.
When renaming a folder if clicking
Apply instead of
Save, a confirmation pop-up dialog is shown with duplicated header and footer. The workaround is to use the
AWS & Azure users may see a warning about expired licenses at first CJP boot. This message can be safely ignored and will be removed once the setup process is completed.
When a Client Master is straight deleted from a CJOC, the connection details are left behind. The workaround is to delete the CJOC connection details from the client master global configuration page.
Shared Docker Cloud Configuration is not supported after
2.7.20.x release line.
Especially for large clusters with multiple CJE instances, automatic backups of CloudBees Jenkins Analytics can cause high memory usage. The workaround when this happens is to disable automatic backups of Analytics.
CloudBees Jenkins Analytics does not fully support the Pipeline job type. This can compromise the accuracy of the statistics, because some of the information coming from pipelines will be missing.
Jenkins supports the definition of complex labels for nodes, including expressions with logic operators and conjunctions. This level of complexity is not currently supported by CloudBees Jenkins Analytics, so labels having complex expressions are not being reported correctly. As a workaround, it is possible to simplify node label expressions by defining multiple labels for the same node.
When running CJOC on Windows, deleting a Client Master from CJOC may display an error indicating that a file could not be deleted. The workaround is to stop CJOC and manually delete the Client Master folder.
Dismiss button for the Analytics administrative monitor always redirects to a 404 error page.
Shared Slaves and Shared Clouds permissions may be missing from the RBAC permission matrix. If so, navigate to the "New Item" wizard, and then go back to the permission configuration page.
Once Analytics data backup is reconfigured, the CJOC instance needs to be restarted for Analytics to start the new backup cycle and follow the specified timeout period.
Analytics logs may show some upload failures in the
2.7.20.x release line.
A connection failure error is reported if Analytics Dashboard Creator is accessed via a URL where the CJOC hostname/ip is different from the one configured in the Jenkins Global Configuration page.
If jobs use label operators to restrict the agent labels they can run on, those logic operators are displayed in the Analytics Dashboards as if they were labels themselves.
The Analytics BulkReindexOp doesn't appear among the cluster operations options. The workaround is to restart Jenkins.
The Dumb Slaves "Launch Method" drop down duplicates the option "Launch Slave Agent via web start." Any of the two options have the same effect, choosing one or the other will not affect the behavior.
If upgrading from a Jenkins instance with Analytics version prior to
1.8.100, the Analytics Unreadable Data Monitor may be showing unresolvable data warnings. These can be ignored and dismissed.
If a build agent from either a Shared Slave or a Shared Cloud is returned to CJOC while CJOC is in certain specific points during the shutdown lifecycle, then the connected master will no longer retain a record of the lease and the record of the lease return will not have been persisted on CJOC. The specific build agent in question will be unavailable for lease until the build agent lease is manually force released.
When you are moving a Client Master, it will be disconnected and reconnected. Move operation of many masters may fail because some of them will get reconnected during the move.
Shared Cloud instances on CJOC are malfunctional if their names contain spaces and other special symbols. The recommended symbol set is