CloudBees Jenkins Platform 2.277.1.2

You can now define environment variables that can be passed to the builds within a folder in the items.yaml file, which is part of the CloudBees CasC configuration bundle. You can also export environment variables used in Folders Plus as a part of the CloudBees CasC configuration bundle.

In this release Jenkin LTS has migrated configuration pages away from tables to divs to improve the responsiveness and usability of the forms. All plugins in the CloudBees Assurance Program (CAP) have been updated to support this change.

The github-branch-source plugin requests the rate limit repeatedly during a normal operation, which can result in up to 50% of requests being for rate limit.

The contrast between the text and the body of form navigation tabs is low and makes it hard to read for some people.

Saving a folder was failing due to a bad interaction with the cyberark-credentials provider under specific conditions. The issue occurred when a user without the cyberark.configure permission attempted to save a folder that existed before the CyberArk provider was enabled for folders. Additionally, if the folder was not previously saved by a user with cyberark.configure permissions, the failure occurred and the user was unable to save the folder.

The buttons in the administrative monitors, such as the “More Info” button, do not included a valid crumb in the request when they are clicked from the header. Now the buttons are fixed.

No user-facing changes. Internal changes were made to fix compatibility issues caused by the changes to form layouts in the March Jenkins LTS release.

Jenkins LTS has been upgraded to use the latest version of jQuery. All plugins under the CloudBees Assurance Program (CAP) have been upgraded to use the same version of jQuery. For more information on CAP, see CloudBees Assurance Program. The unsafe plugins jquery and jquery-detached have now been removed from all CloudBees products and are no longer part of CAP. Please note that these two plugins are not automatically uninstalled in your instance because other plugins in your installation may still have dependencies on them. For instructions on how to check for dependencies in a particular plugin, see How to determine if a plugin is in use.

If an update center needs to be refreshed after startup, it is refreshed asynchronously. However, if a plugin was removed from the offline update center and you attempt to install a plugin that depends on the removed plugin, the plugin fails to install until the metadata has been refreshed.

Durability settings for a Pipeline are ignored during lightweight checkout.

An issue with the Role-Based Access Control plugin was causing a negative impact to user interface performance while accessing nested folders and jobs on connected masters that had an authorization strategy managed by operations center. This issue has been resolved in release 2.277.1.2 revision 3, the cache now functions properly, and there is no performance impact.

An issue with the Role-Based Access Control plugin was causing a negative impact to user interface performance while accessing nested folders and jobs on connected masters that had an authorization strategy managed by operations center. This issue has been resolved, the cache now functions properly, and there is no performance impact.

This revision includes security updates to address vulnerabilities in Jenkins, CloudBees Jenkins Distribution, CloudBees Jenkins Platform, and CloudBees CI.

An issue with the Role-Based Access Control plugin can cause a negative impact to user interface performance while accessing nested folders and jobs on connected masters that have an authorization strategy managed by Operations Center. The issue is known, and the fix will be published as part of an incremental release on March 19, 2021.

An issue with the Role-Based Access Control plugin authorization made it possible for users to view nested resources, even if they did not have permission to view the parent resources.