10 years ago, the Jenkins ruby-runtime was first released. It was an experiment to let plugins be written in ruby but still get integrated into the main Java Virtual Machine runtime with help of JRuby. A similar extension was made to allow plugins to be written in Python but still integrated into the Java Virtual Machine with Jython. Over the years though, the experiments are no longer being...

A critical security vulnerability has been identified in the popular "Apache Log4j 2" library. This vulnerability is identified as CVE-2021-44228. Log4j in Jenkins The Jenkins security team has confirmed that Log4j is not used in Jenkins core. Jenkins plugins may be using Log4j. You can identify whether Log4j is included with any plugin by running the following Groovy script in the Script Console: org.apache.logging.log4j.core.lookup.JndiLookup.class.protectionDomain.codeSource If this results in the following error,...

A continuous integration environment is a mixed bag of machines, platforms, build toolchains and operating systems. Ideally, you want as much flexibility as possible in managing these environments. You want your build machines to be interchangeable and you don’t want to tie your builds to a particular machine. Using containers as build agents is an effective way to get the flexibility you need to create applications faster...

The Jenkins community has recently completed the 2021 elections. On behalf of the Jenkins community and the elections committee, we congratulate all newly elected board members and officers! We also thank all candidates and voters who participated this year. Election results: Mark Waite joins the re-elected Oleg Nenashev and Kohsuke Kawaguchi, Gavin Mogan and Ewelina Wilkosz on the Jenkins Governance Board Tim Jacomb will continue in the role of Release Officer (uncontested) Alyssa...

This year, the Duchess community embraced a new challenge: working on women’s presence in Open Source while participating in Jenkins during the Hacktoberfest, a yearly event. Huge congrats to all the contributors! 🥳 Note: This blog is a translation, the source blog post is located here https://www.duchess-france.org/duchess-hacktoberfest-2021/ Anne-Laure Gaillard Interview Hello Anne-Laure, can you introduce yourself? LinkedIn After a PhD in Computer Science and a few years in Software Development, I...

Summary Jenkins bundles Guava, a core Java library from Google. Beginning with Jenkins 2.320 (released on November 10, 2021), Jenkins has upgraded the Guava library from 11.0.1 (released on January 9, 2012) to 31.0.1 (released on September 27, 2021). Plugins have already been prepared to support the new version of Guava in JEP-233. Use the Plugin Manager to upgrade all plugins before and after upgrading to Jenkins 2.320. Motivation Many security-conscious organizations...

Hacktoberfest 2021 made great contributions to the Jenkins project. We thank all the Hacktoberfest contributors and the maintainers who reviewed the submitted pull requests. We received contributions in artwork, translation, documentation, security, and general purpose improvements. The contributions included software improvements, documentation updates, and video tutorials. Translations and Artwork Duchess France provided significant improvements to the French localization of Jenkins. The changes included new translations of text, corrections of existing...

In common CI/CD use-cases a lot of the space is consumed by test reports. This data is stored within JENKINS_HOME, and the current storage format requires huge overheads when retrieving statistics and, especially, trends. In order to display trends, each report has to be loaded and then processed in-memory. The main purpose of externalising Test Results is to optimize Jenkins performance and storage by querying the desired data from...