CloudBees Jenkins Platform 2.176.3.2

Security Advisory

Managing catalogs and pipeline templates across a large number of Jenkins masters using the graphical user interface (GUI) is time consuming and prone to human error due to the repetitive nature of the task. A new pipeline-template-catalogs CLI command was created. This CLI command allows the administrator to automate the management of catalogs and pipeline templates across multiple Jenkins masters which reduces the amount of time required and ensures accuracy and consistency across all development teams.

The CloudBees Update Center plugin was using an outdated/unsupported dependency, JSoup 1.7.3., which contained a vulnerability. With this fix the CloudBees Update Center plugin was updated with JSoup 1.8.3.

Shared Libraries using folder-scoped credentials failed to authenticate. With this fix, we added functionality to expose parent item scope to children, allowing shared libraries to see and use folder-scoped credentials.

If an agent being used by a Pipeline was removed (deconfigured) from Jenkins, the build would hang forever. With this fix, Pipeline builds now abort immediately if an agent they are using has been removed from Jenkins.

GitHub Webhooks were not created after new pipeline creation in BlueOcean. This issue was specific to pipelines created using BlueOcean. With this fix, webhooks are registered with GitHub on new pipelines created in BlueOcean.

For users without Pipeline Template Catalog permissions, the left nav displayed only the icon for Pipeline Templates Catalog. Additionally, these same users could access an incomplete Pipeline Templates Catalog page. With this fix, we added new view-only permission, fixing the left nav and Pipeline Templates Catalog page to render data according to permissions.

The Discard Old Items configuration for Organization Folders was easily misunderstood by users as being about artifacts and builds. With this fix, the Discard Old Items settings for Organization Folders and Multibranch Projects now have a description explaining their use.

The GDSL file provided by Jenkins to support syntax highlighting in IntelliJ IDEA did not support the parallel step, and incorrectly marked some step parameter types as Map when they should have been List. The parallel step is now correctly supported, and step parameter types have been fixed where appropriate.

The rename action was available for team folders, and using this option would rename the folder on the filesystem, bypassing Team functions. With this fix, the "rename" menu item is removed for team folders. Users can still change the display name of the folder using folder settings if they want to rename the team on the UI.

Clicking 'Check Now' in the Update Center was taking a long time to return. With this fix, we have improved the processing speed of the 'Check now' button in Update Center.