The release notes on this page are for CloudBees CI releases that are no longer supported. |
Looking for the latest release notes for CloudBees CI? Refer to CloudBees CI release notes. |
If you skip versions when you upgrade, refer to previous versions of the release notes for any relevant known issues or upgrade notes. The CloudBees supported platforms and CloudBees maintenance lifecycle policies pages contain additional information about what is supported in this release. |
2.414.3.8 Security release
Released: October 25, 2023
Modern cloud platforms
Traditional platforms
2.414.3.7 Security release
Released: October 18, 2023
With the 2.414.3.7 release, the following plugins were added to CAP:
-
GitLab API (
gitlab-api
) -
GitLab Branch Source (
gitlab-branch-source
) -
Pipeline Maven Integration (
pipeline-maven
) -
Pipeline Maven API (
pipeline-maven-api
)
If your CasC bundle has any of these plugins in the plugin catalog, they must be removed. Otherwise, your bundle becomes invalid and will not start.
With the 2.414.3.7 release, the following plugin was removed from CAP:
-
Maven Integration (
maven-plugin
)
If this plugin is already installed, it will continue to be installed. If you wish to install this plugin through CasC from the October release onward, it must be included in the CasC bundle’s plugin catalog and in the plugins.yaml
file.
Starting with Kubernetes plugin (version 4029.v5712230ccb_f8) the YAML parsing library was updated to snakeyaml-engine:2.5
which implements YAML specification 1.2.2. In this specification, the YAML merge operator (<<) was removed. Therefore, any usage of the merge operator in pod definitions needs to be removed.
An example of a pod definition using YAML anchors and aliases instead of the merge operator:
apiVersion: v1 kind: Pod spec: containers: - name: maven image: 3.9.4-eclipse-temurin-11 resources: requests: &maven-container-resources cpu: 1500m memory: 3500Mi limits: *maven-container-resources command: - sleep args: - infinity
▼
An example of the result of YAML specification 1.2.2 on a pod definition using anchors and aliases instead of the merge operator:
apiVersion: v1 kind: Pod spec: containers: - name: maven image: 3.9.4-eclipse-temurin-11 resources: requests: cpu: 1500m memory: 3500Mi limits: cpu: 1500m memory: 3500Mi command: - sleep args: - infinity
▼
For more information, refer to YAML version 1.2.
Modern cloud platforms
Traditional platforms
2.414.2.2 Security release
Released: September 20, 2023
CasC Export now escapes variable expressions. However, variable expressions are not replaced when imported, unless a new configuration is set as pass thru.
This fix introduces a breaking change and any bundle using the variable resolution will stop working. To continue to use and resolve variables in your bundle, configure your CloudBees CI instance before loading your CasC bundles. To configure your CloudBees CI instance do one of the following:
-
Enable the Enable or disable the variable resolution in the item creation for administrator setting on the System configuration page.
-
Configure the
cascItemsConfiguration
value in the YAML file.
For more information, refer to Creating items with CasC for controllers or Creating items with CasC for the operations center.
Modern cloud platforms
Traditional platforms
2.414.1.4
Released: August 28, 2023
Modern cloud platforms
Traditional platforms
2.401.3.4 Security release
Released: August 16, 2023
Modern cloud platforms
Traditional platforms
2.401.3.3 Security release
Released: July 26, 2023
Modern cloud platforms
Traditional platforms
2.401.2.6 Security release
Released: July 12, 2023
Modern cloud platforms
Traditional platforms
2.401.2.5
Released: July 3, 2023
Modern cloud platforms
Traditional platforms
2.401.2.3
Released: June 28, 2023
Pod Security Policy (PSP) was deprecated in Kubernetes 1.21 and removed from Kubernetes 1.25. As an alternative, you can enforce Pod Security Standards by using Pod Security Admission (PSA). Refer to Pod Security Admission for CloudBees CI on modern cloud platforms for more information.
Operations center sign-on (SSO) is not working from controllers connected using WebSocket. An error is displayed when attempting to log in that the public key is missing.
Modern cloud platforms
Traditional platforms
2.401.1.3
Released: May 31, 2023
The CloudBees CasC Server plugin 2.0 upgrade introduces bundle branch and tag support. The plugin update changes the folder structure within JENKINS_HOME
that stores the Configuration as Code for controller bundles. Due to the change to this folder structure, your existing bundles must be migrated. For more information on migrating your bundles, refer to Migrating Bundles.
Username/password authentication is no longer supported for use on the Jenkins CLI on a connected controller when the operations center single sign-on (SSO) is in use. Instead, create an API token on the operations center.
Modern cloud platforms
Traditional platforms
2.387.3.5 Security release
Released: May 16, 2023
Modern cloud platforms
Traditional platforms
2.387.3.3 Security release
Released: May 3, 2023
Modern cloud platforms
Traditional platforms
2.387.2.4 Security release
Released: April 12, 2023
Modern cloud platforms
Traditional platforms
2.387.2.3 Security release
Released: April 5, 2023
The Promoted Builds plugin was removed from the CloudBees Assurance Program (CAP). It was previously integrated with the Operations Center Context plugin.
Modern cloud platforms
Traditional platforms
2.387.1.3 Security release
Released: March 21, 2023
Modern cloud platforms
Traditional platforms
2.387.1.2 Security release
Released: March 8, 2023
Modern cloud platforms
Traditional platforms
2.375.4.2 Security release
Released: March 8, 2023
Modern cloud platforms
Traditional platforms
2.375.3.5 Security release
Released: February 15, 2023
Modern cloud platforms
Traditional platforms
2.375.3.4 Security release
Released: February 9, 2023
Modern cloud platforms
Traditional platforms
2.375.3.3
Released: February 8, 2023
The Java library used to access Kubernetes, fabric8 Kubernetes-client, has been upgraded from 5.x to 6.x.
This new Java library version enables customers to provide CustomResourceDefinitions (CRDs) to the provisioning lifecycle, even if they are not part of the client Java model.
This update has no impact for customers who do not use the YAML field under Advanced configuration on the controller configuration screen in the Operations center. For customers using the YAML field under Advanced configuration, this update has the following impact:
-
apiVersion
on a resource being deserialized is now required. This prevents the unintentional parsing of custom types without a registered class as a built-in type of the same name. Refer to kubernetes-client/MIGRATION-v6.md at main · fabric8io/kubernetes-client for more technical details about this breaking change. -
If
apiVersion
is missing, the controller reprovisioning will fail once the operations center is upgraded until the issue is fixed.
For more information about this upgrade, refer to this knowledge base article, The apiVersion on a resource being deserialized is required after upgrading Kubernetes-client 6.x. The article also contains a script that you can run to check for invalid configurations. The configurations listed in the output of this script should be fixed by providing a valid apiVersion
.
If you have questions about this upgrade, contact CloudBees Support for assistance.
Modern cloud platforms
Traditional platforms
2.375.2.3 Security release
Released: January 24, 2023
Modern cloud platforms
Traditional platforms
2.375.2.2
Released: January 11, 2023
Modern cloud platforms
Traditional platforms
2.375.1.1
Released: November 30, 2022
Modern cloud platforms
Traditional platforms
2.361.4.1
Released: November 18, 2022
Modern cloud platforms
Traditional platforms
2.361.3.4 Security release
Released: November 15, 2022
Modern cloud platforms
Traditional platforms
2.361.3.2
Released: November 2, 2022
Modern cloud platforms
Traditional platforms
2.361.2.2 Security release
Released: October 19, 2022
Modern cloud platforms
Traditional platforms
2.361.2.1
Released: October 5, 2022
Modern cloud platforms
Traditional platforms
2.361.1.2
Released: September 8, 2022
Modern cloud platforms
Traditional platforms
2.346.4.1 Security release
Released: August 23, 2022
Modern cloud platforms
Traditional platforms
2.346.3.4
Released: August 10, 2022
Modern cloud platforms
Traditional platforms
2.346.2.3 Security release
Released: July 27, 2022
Modern cloud platforms
Traditional platforms
2.346.2.2
Released: July 13, 2022
Modern cloud platforms
Traditional platforms
2.346.1.4 Security release
Released: June 22, 2022
Modern cloud platforms
Traditional platforms
2.332.4.1 Security release
Released: June 22, 2022
Modern cloud platforms
Traditional platforms
2.332.3.4 Security release
Released: May 17, 2022
Modern cloud platforms
Traditional platforms
2.332.3.2
Released: May 4, 2022
Modern cloud platforms
Traditional platforms
2.332.2.6 Security release
Released: April 12, 2022
Modern cloud platforms
Traditional platforms
2.332.2.4
Released: April 6, 2022
Modern cloud platforms
Traditional platforms
2.332.1.5 Security release
Released: March 15, 2022
Modern cloud platforms
Traditional platforms
2.332.1.4
Released: March 9, 2022
The Guava library has been upgraded from 11.0.1 to 31.0.1.
This upgrade removes the usage of deprecated methods for all plugins in the CloudBees Assurance Program (CAP). Please ensure that all other plugins (those not in the CloudBees Assurance Program and any custom developed plugins) are updated to a recent version that is compatible. If you have questions about this upgrade, contact CloudBees Support for assistance.
Modern cloud platforms
Traditional platforms
2.319.3.4 Security release
Released: February 15, 2022
Modern cloud platforms
Traditional platforms
2.319.3.3 Security release
Released: February 9, 2022
Modern cloud platforms
Traditional platforms
2.319.2.9 Security release
Released: January 28, 2022
Modern cloud platforms
Traditional platforms
2.319.2.7
Released: January 18, 2022
The CloudBees CI on traditional platforms Docker images were recently migrated from Debian to Universal Base Images (UBI). Please note that Apache Subversion is not available as part of the UBI Docker images.
Modern cloud platforms
Traditional platforms
2.319.2.5 Security release
Released: January 12, 2022
The CloudBees CI on traditional platforms Docker images were migrated from Debian to Universal Base Images (UBI) in this release. UBI provides a more secure and stable model for building Docker images.
Please note that, as part of the migration from Debian to UBI, various system packages were not included in the CloudBees CI on traditional platforms Docker images, causing issues in some specific use cases. This issue has been resolved in release 2.319.2.7. CloudBees recommends that you install the latest version to avoid potential issues.
Modern cloud platforms
Traditional platforms
2.319.1.5 Security release
Released: December 1, 2021
-
If using CasC for controllers to create Pipeline jobs, Multibranch Pipeline jobs, GitHub Organizations, or BitBucket Teams/Projects, you must add the
cloudbees-casc-items-controller
plugin to the controller’s plugins.yaml file during the upgrade process, before the first restart of the controller. Otherwise, the controller instance fails to restart after the upgrade and anInvalid kind
error is returned.For more information, refer to Creating a CasC bundle for controllers
-
If configuring a managed controller to be automatically provisioned with CasC, you must add the
cloudbees-casc-items-server
plugin to the operations center’s plugins.yaml file during the upgrade process, before the first restart of the operations center. Otherwise, the operations center instance fails to restart after the upgrade and anInvalid configuration elements
error is returned.For more information, refer to Creating a CasC bundle for the operations center.
-
If using CasC for the operations center to create Cluster Operations or controllers, you must add the
cloudbees-casc-items-server
plugin to the operations center’s plugins.yaml file during the upgrade process, before the first restart of the operations center. Otherwise, the operations center instance fails to restart after the upgrade and anInvalid kind
error is returned.For more information, refer to Creating a CasC bundle for the operations center.
The cloudbees-casc-api
plugin can also be removed from the controller and operations center plugins.yaml file.
Modern cloud platforms
Traditional platforms
2.303.3.3 Security release
Released: November 4, 2021
Modern cloud platforms
Traditional platforms
2.303.2.6
Released: October 15, 2021
Modern cloud platforms
Traditional platforms
2.303.2.5 Security release
Released: October 8, 2021
Modern cloud platforms
Traditional platforms
2.303.2.3 Security release
Released: October 6, 2021
-
You use RPM to upgrade your installation, or
-
You use the the trusted folder feature of the CloudBees Folders Plus plugin
CloudBees CI and CloudBees Jenkins Platform version 2.303.2.3
have been released with CloudBees Folders Plus plugin version 3.18, which has an issue that could prevent the instances from starting. Additionally, the RPM install package was not correctly configured. If you used it to upgrade, it could cause the operations center and client controllers to start as a new instance.
Please use version 2.303.2.5 instead of 2.303.2.3.
Modern cloud platforms
Traditional platforms
2.303.1.6 Security release
Released: August 31, 2021
Modern cloud platforms
Traditional platforms
2.303.1.5 Security release
Released: August 25, 2021
Modern cloud platforms
Traditional platforms
2.289.3.2 Security release 1 revision
Released: July 28, 2021
CloudBees recommends that you start to prepare for the August release of Jenkins LTS as soon as possible. The August release will include a change that removes the Apache Commons Digester from Jenkins Core. If you use Jenkins LTS plugins that are not in the CloudBees Assurance Program (CAP), you should update them before upgrading your CloudBees products to ensure compatibility with the August release. If your company uses its own proprietary (non-CloudBees) plugins, CloudBees recommends that you test them against Jenkins version 2.302+ prior to the August release. As always, backing up your data before upgrading is strongly encouraged. For details about this change and a list of impacted plugins, please see our knowledge base article Commons Digester Library Removal.
Modern cloud platforms
Traditional platforms
2.289.2.3
Released: July 9, 2021
Modern cloud platforms
Traditional platforms
2.289.2.2 Security release
The RPM-based installation for version 2.289.2.2 is failing for some CloudBees CI on traditional platforms customers with custom users. You may receive the following error:
main process exited, code=exited, status=6/NOTCONFIGURED
This issue has been resolved in version 2.289.2.3. CloudBees recommends that you install version 2.289.2.3 instead of version 2.289.2.2 to avoid potential issues.
If you attempted to upgrade to version 2.289.2.2 and encountered issues, refer to this knowledge base article or contact CloudBees Support.
The jquery
and jquery-detached
plugins have been removed from all CloudBees Jenkins-based products and are no longer part of CloudBees Assurance Program. However, these plugins are not automatically uninstalled from your CloudBees CI instance as other plugins you use may still have dependencies on them. Please ensure that your CloudBees CI instance does not have any dependencies on these plugins, and then remove them. For instructions on how to check for dependencies in a particular plugin, refer to How to determine if a plugin is in use.
Released: June 30, 2021
Modern cloud platforms
Traditional platforms
v2.289.1.2 Security release
When large HTTP requests are submitted while the built-in Winstone/Jetty container is configured to use SSL/TLS connections, the following exception can occur:
Encrypted buffer max length exceeded
This exception could prevent you from configuring controllers.
This issue is resolved in versions 2.277.4.4 and 2.289.2.2. If you encounter this error, you should upgrade to one of those versions as soon as possible.
The jquery
and jquery-detached
plugins have been removed from all CloudBees Jenkins-based products and are no longer part of CloudBees Assurance Program. However, these plugins are not automatically uninstalled from your CloudBees CI instance as other plugins you use may still have dependencies on them. Please ensure that your CloudBees CI instance does not have any dependencies on these plugins, and then remove them. For instructions on how to check for dependencies in a particular plugin, refer to How to determine if a plugin is in use.
Released: June 2, 2021
Modern cloud platforms
Traditional platforms
v2.277.4.4
The jquery
and jquery-detached
plugins have been removed from all CloudBees Jenkins-based products and are no longer part of CloudBees Assurance Program. However, these plugins are not automatically uninstalled from your CloudBees CI instance as other plugins you use may still have dependencies on them. Please ensure that your CloudBees CI instance does not have any dependencies on these plugins, and then remove them. For instructions on how to check for dependencies in a particular plugin, refer to How to determine if a plugin is in use.
Released: July 2, 2021
Modern cloud platforms
Traditional platforms
v2.277.4.3 Security release
When large HTTP requests are submitted while the built-in Winstone/Jetty container is configured to use SSL/TLS connections, the following exception can occur:
Encrypted buffer max length exceeded
This exception could prevent you from configuring controllers.
This issue is resolved in versions 2.277.4.4 and 2.289.2.2. If you encounter this error, you should upgrade to one of those versions as soon as possible.
The jquery
and jquery-detached
plugins have been removed from all CloudBees Jenkins-based products and are no longer part of CloudBees Assurance Program. However, these plugins are not automatically uninstalled from your CloudBees CI instance as other plugins you use may still have dependencies on them. Please ensure that your CloudBees CI instance does not have any dependencies on these plugins, and then remove them. For instructions on how to check for dependencies in a particular plugin, refer to How to determine if a plugin is in use.
Released: May 11, 2021
Modern cloud platforms
Traditional platforms
v2.277.4.2 Security release
The jquery
and jquery-detached
plugins have been removed from all CloudBees Jenkins-based products and are no longer part of CloudBees Assurance Program. However, these plugins are not automatically uninstalled from your CloudBees CI instance as other plugins you use may still have dependencies on them. Please ensure that your CloudBees CI instance does not have any dependencies on these plugins, and then remove them. For instructions on how to check for dependencies in a particular plugin, refer to How to determine if a plugin is in use.
Released: May 5, 2021
Modern cloud platforms
Traditional platforms
v2.277.3.1
Released: April 20, 2021 Security release 2 revisions
Modern cloud platforms
Traditional platforms
v2.277.2.3
Released: April 7, 2021 Security release 1 revision
Modern cloud platforms
Traditional platforms
v2.277.1.2
Issue
After updating an instance, the setup wizard is displayed.
Jenkins 2.277.1 removes the Upgrade Wizard that was no longer operational after Jenkins 2.0. This caused a regression for instances created before 2.4/2.7.1 LTS.
At the time of this writing, no fix is available for this issue.
Workaround
See the Jenkins upgrade guide for a workaround for this issue. On subsequent restarts, the setup wizard will no longer appear.
The March release includes important updates. If you use Jenkins LTS plugins that are not in the CloudBees Assurance Program (CAP), you should update them before upgrading your CloudBees products to ensure compatibility with the March release. If your company uses its own proprietary (non-CloudBees) plugins, CloudBees recommends that you test them against Jenkins version 2.277.1 prior to updating your CloudBees products. And, as always, backing up your data before upgrading is strongly encouraged.
For details about changes in the March Jenkins LTS release, see:
The jquery
and jquery-detached
plugins have been removed from all CloudBees Jenkins-based products and are no longer part of CloudBees Assurance Program. However, these plugins are not automatically uninstalled from your CloudBees Jenkins Platform instance as other plugins you use may still have dependencies on them. Please ensure that your CloudBees Jenkins Platform instance does not have any dependencies on these plugins, and then remove them. For instructions on how to check for dependencies in a particular plugin, refer to How to determine if a plugin is in use.
Released: March 11, 2021 Security release 2 revisions
Modern cloud platforms
Traditional platforms
v2.263.4.2
Released: February 26, 2021
Modern cloud platforms
Traditional platforms
v2.263.4.1
Released: February 11, 2021 Security release 1 revision
Modern cloud platforms
Traditional platforms
v2.263.2.3
Version 2.263.2.3 fixes some critical regressions found in version 2.263.2.2 of the following products:
-
CloudBees CI
-
CloudBees Jenkins Distribution
-
CloudBees Jenkins Platform
-
CloudBees Jenkins Enterprise
Potential issues include:
-
If you use external artifact storage, it is not possible to download entire directories of archived artifacts as Zip files.
-
Zip files containing directories of workspaces, archived artifacts, and similar user-created content are missing top-level directories.
-
File handles are not closed directly whenever individual files are downloaded from workspaces, archived artifacts, and other user-created content. This could result in Jenkins running out of file handles.
CloudBees recommends that you upgrade to version 2.263.2.3 to prevent potential issues with user-created content.
Released: January 21, 2021 Security release