RELEASED: Public: September 20, 2023
Security fixes
- CasC Export should escape variable expressions (BEE-38184)
-
CasC Export now escapes variable expressions. However, variable expressions are not replaced when imported, unless a new configuration is set as pass thru.
This fix introduces a breaking change and any bundle using the variable resolution will stop working. To continue to use and resolve variables in your bundle, configure your CloudBees CI instance before loading your CasC bundles. To configure your CloudBees CI instance do one of the following:
-
Enable the Enable or disable the variable resolution in the item creation for administrator setting on the System configuration page.
-
Configure the
cascItemsConfigurationvalue in the YAML file.For more information, refer to Creating items with CasC for controllers or Creating items with CasC for the operations center.
-