In a past blog post, Delivery Pipelines, with Jenkins 2, SonarQube, and Artifactory, we talked about pipelines which result in binaries for development versions, and in Delivery pipelines, with Jenkins 2: how to promote Java EE and Docker binaries toward production, we examined ways to consistently promote applications toward production. In this blog post, I continue on both by discussing more details on security related quality gates and bringing...

In my daily work I often have to create or modify Jenkinsfiles and more often than I would like, I make mistakes. It is a very tedious workflow when you make a change to your Jenkinsfile, create a commit, push the commit and wait for your Jenkins Server to tell you, that you have missed a bracket. The Command-line Pipeline Linter (https://jenkins.io/doc/book/pipeline/development/) does a great...

The Jenkins Contributor summit is where the current and future contributors of the Jenkins project get together. This summit will be on Tuesday, October 23rd 2018 in Nice, France just before Jenkins World. What should those planning on joining expect at the event? Earlier this year in September we had a contributor summit in San Francisco which gave us a pretty good outline of what to expect. First...

I would like to introduce Custom WAR Packager - a new tool for Jenkins administrators and developers. This tool allows packaging custom Jenkins distributions as WAR files, Docker images and Jenkinsfile Runner bundles. This tool allows packaging Jenkins, plugins, and configurations in a ready-to-fly distribution. Custom WAR packager is a part of the Ephemeral Jenkins controller toolchain which we presented in our A Cloud Native Jenkins blogpost. This toolchain is already used...

It has been a while since the last blogpost about Google Summer of Code in Jenkins. GSoC 2018 has officially finished on August 23, and we had a Jenkins Online Meetup where we had final presentations of the GSoC projects. It is never late to provide more context, so I would like to summarize the results and provide updates of what was happening in Jenkins GSoC...

Traditionally there are a lot of events happening in the Jenkins organization in Autumn. I would like to share some information about the upcoming hackathons. Online Event: Hacktoberfest As you probably know, there is an ongoing Hacktoberfest event. The Jenkins project is participating in it and everybody is welcome to contribute to Jenkins as a part of this event. The event lasts from October 01 to October 31, and you...

We just released security updates to Jenkins, versions 2.146 and 2.138.2, that fix multiple security vulnerabilities. For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide. Further improvements In addition to the security fixes listed in the security advisory, we also applied multiple improvements that make future security...

One of the major strengths of Jenkins is its customizability and extensibility. With its plugin ecosystem and long list of (possibly hidden) options, Jenkins can be used for a wide range of use cases. The downside of all this flexibility is that, not knowing how people use Jenkins, we mostly rely on issues filed in our bug tracker to know when things go wrong. And over the...