March 18, 2024 Governance Board Agenda

2024-03-18 Thread Mark Waite 
The Jenkins board meeting starts at 7:00 PM UTC (about 6 hours from now).  
Zoom  link is 
https://zoom.us/j/91564716663?pwd=R3A2RDFGcU1wTVdoVTErYm1jNzVWdz09 

Here is the draft agenda: 


News 


   - Ampere Computing loaner AMR64 server is running Jenkins tasks
   - Jenkins has been accepted to Google Summer of Code 2024, see Blog post 
    from 
   Alyssa Tong
  - Proposols to be sent by end of March
   - Jenkins award voting is in progress. These awards recognize 
   contributions from individuals in the community and the progress made in 
   the name of Jenkins. Nominated candidates are:
  - Most Valuable Jenkins Advocate:
 - Alexander Brandes
 - Bruno Verachten
 - Darin Pope
 - Kris Stern
  - Most Valuable Jenkins Contributor:
 - Basil Crow
 - Daniel Beck
 - Kris Stern
 - Stefan Spieker
 - Tim Jacomb
 - Ullrich Hafner
  - Jenkins Security MVP:
 - Alvaro Muñoz
 - Yaniv Nizry
  - Voting 
  

 is 
  possible until March 22, 2024
   
Action Items 


   - Basil create the attribution entries for the downloads page
  - Jenkins sponsors have changed
  - Draft PR is almost ready for review at: 
  jenkins-infra/jenkins.io#6882 
  
   - Kevin Martens retire the Chinese Jenkins site
  - Mark needs to do more Kubernetes setup, then Kevin and Mark will 
  meet with Damien
  - More work after Kevin returns from holiday
   
Community activity 


   - GSoC preparation: A lot of traffic in the community forums, chat 
   rooms, and GitHub repositories
   - Contributer Spotlight this week: Bruno Verachten

Governance Topics 


   - Azure expense status
  - February expenses were $4200 USD - nicely under $5000 budget
 - Special thanks to Damien, Herve, and Stephane for cost reductions
  - AWS credits donation
  - Credits have been received, not yet applying credits to Jenkins 
  tasks
   - Delphix plugin uses a proprietary component 
   
  - Delphix maintainers have proposed an idea for the fix
  - Thanks to @daniel-beck for finding the issue and working with 
  Delphix plugin maintainers
   - Java 11 end of life and Spring end of public support 
   

  - Last public build of Spring security framework 5.8.x is August 2024
 - Spring security 6.x requires Jetty 11 with Jakarta EE 9 
 (jakartaee.servlet), not Jetty 10 with Jakarta EE 8 (javax.servlet)
  - Last public build of Spring framework 5.3.x is August 2024
 - Spring framework 6.1 and later require Java 17
  - Alternatives:
 - Accept that if there is a security vulnerability reported in 
 Spring security 5.8.x between August 2024 and end Oct 2024, we may 
need to 
 fork Spring Security and fix it ourselves
  

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/31a9639c-746c-4691-8f7f-a15973a8fa90n%40googlegroups.com.

Re: Detect Renovate as dependency version manager

2024-03-18 Thread Adrien Lecharpentier 
I'm looking into this.


Le lun. 18 mars 2024, 10:32, 'Michael Kriese' via Jenkins Developers <
jenkinsci-dev@googlegroups.com> a écrit :

> Still no updated 樂
>
> https://plugins.jenkins.io/additional-identities-plugin/healthscore/
> https://plugins.jenkins.io/scoring-load-balancer/healthscore/
>
> adrien.lec...@gmail.com schrieb am Donnerstag, 14. März 2024 um 08:49:32
> UTC+1:
>
>> No you don't.
>>
>> Le jeu. 14 mars 2024, 08:22, 'Michael Kriese' via Jenkins Developers <
>> jenkin...@googlegroups.com> a écrit :
>>
>>> Do i need to release a new version to get the issue tracker and renovate
>>> changes detected?
>>>
>>> Michael Kriese schrieb am Mittwoch, 13. März 2024 um 16:12:52 UTC+1:
>>>
 https://github.com/jenkins-infra/plugin-health-scoring/issues/483

 Will now move my configs to github folder as workaround.

 adrien.lec...@gmail.com schrieb am Mittwoch, 13. März 2024 um 15:53:59
 UTC+1:

> Hi,
>
> Thank you for reaching out.
>
> First, you can find the code of the plugin-health-score (PHS) here:
> https://github.com/jenkins-infra/plugin-health-scoring
>
> Second, I think I see the problem. I got under the impression that the
> renovate.json file has to be in the .github folder. But it's working for
> you to have it at the root of the repository.
>
> You can see in the code of PHS that we are looking in .github folder (
> https://github.com/jenkins-infra/plugin-health-scoring/blob/908c24dade7fb2eb3865fc5046e6ab4baec4754c/core/src/main/java/io/jenkins/pluginhealth/scoring/probes/AbstractDependencyBotConfigurationProbe.java#L57)
> for a file named renovate.json (
> https://github.com/jenkins-infra/plugin-health-scoring/blob/908c24dade7fb2eb3865fc5046e6ab4baec4754c/core/src/main/java/io/jenkins/pluginhealth/scoring/probes/RenovateProbe.java#L45
> ).
>
> Please open a ticket on the PHS repository so we can work this out.
>
> Le mer. 13 mars 2024, 13:33, 'Michael Kriese' via Jenkins Developers <
> jenkin...@googlegroups.com> a écrit :
>
>> Hi,
>>
>> I'm using Renovate to update my dependencies, but it's not deteced
>> as  valid manager on plugin health sore
>>
>> -
>> https://plugins.jenkins.io/additional-identities-plugin/healthscore/
>> - https://plugins.jenkins.io/scoring-load-balancer/healthscore/
>>
>> Where we can add / enable the detection?
>>
>> Regards
>> Michael
>>
>> --
>> You received this message because you are subscribed to the Google
>> Groups "Jenkins Developers" group.
>> To unsubscribe from this group and stop receiving emails from it,
>> send an email to jenkinsci-de...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/jenkinsci-dev/58008a24-3a9e-4954-85af-54025db72e17n%40googlegroups.com
>> 
>> .
>>
> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Jenkins Developers" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to jenkinsci-de...@googlegroups.com.
>>>
>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/jenkinsci-dev/2c3727e4-cb36-4805-871d-af490560f845n%40googlegroups.com
>>> 
>>> .
>>>
>> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/12f04995-3b7d-45d8-96df-403ea81da7afn%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAKwJSvwFYdkoVHGXDyTH2yY04z0kqoy-jyNg4bjfwSBi1yefUg%40mail.gmail.com.

Re: Detect Renovate as dependency version manager

2024-03-18 Thread 'Michael Kriese' via Jenkins Developers 
Still no updated 樂

https://plugins.jenkins.io/additional-identities-plugin/healthscore/
https://plugins.jenkins.io/scoring-load-balancer/healthscore/
 
adrien.lec...@gmail.com schrieb am Donnerstag, 14. März 2024 um 08:49:32 
UTC+1:

> No you don't. 
>
> Le jeu. 14 mars 2024, 08:22, 'Michael Kriese' via Jenkins Developers <
> jenkin...@googlegroups.com> a écrit :
>
>> Do i need to release a new version to get the issue tracker and renovate 
>> changes detected?
>>
>> Michael Kriese schrieb am Mittwoch, 13. März 2024 um 16:12:52 UTC+1:
>>
>>> https://github.com/jenkins-infra/plugin-health-scoring/issues/483
>>>
>>> Will now move my configs to github folder as workaround.
>>>
>>> adrien.lec...@gmail.com schrieb am Mittwoch, 13. März 2024 um 15:53:59 
>>> UTC+1:
>>>
 Hi, 

 Thank you for reaching out. 

 First, you can find the code of the plugin-health-score (PHS) here: 
 https://github.com/jenkins-infra/plugin-health-scoring

 Second, I think I see the problem. I got under the impression that the 
 renovate.json file has to be in the .github folder. But it's working for 
 you to have it at the root of the repository. 

 You can see in the code of PHS that we are looking in .github folder (
 https://github.com/jenkins-infra/plugin-health-scoring/blob/908c24dade7fb2eb3865fc5046e6ab4baec4754c/core/src/main/java/io/jenkins/pluginhealth/scoring/probes/AbstractDependencyBotConfigurationProbe.java#L57)
  
 for a file named renovate.json (
 https://github.com/jenkins-infra/plugin-health-scoring/blob/908c24dade7fb2eb3865fc5046e6ab4baec4754c/core/src/main/java/io/jenkins/pluginhealth/scoring/probes/RenovateProbe.java#L45
 ).

 Please open a ticket on the PHS repository so we can work this out. 

 Le mer. 13 mars 2024, 13:33, 'Michael Kriese' via Jenkins Developers <
 jenkin...@googlegroups.com> a écrit :

> Hi,
>
> I'm using Renovate to update my dependencies, but it's not deteced as  
> valid manager on plugin health sore
>
> - https://plugins.jenkins.io/additional-identities-plugin/healthscore/
> - https://plugins.jenkins.io/scoring-load-balancer/healthscore/
>
> Where we can add / enable the detection?
>
> Regards
> Michael
>
> -- 
> You received this message because you are subscribed to the Google 
> Groups "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send 
> an email to jenkinsci-de...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/jenkinsci-dev/58008a24-3a9e-4954-85af-54025db72e17n%40googlegroups.com
>  
> 
> .
>
 -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Jenkins Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to jenkinsci-de...@googlegroups.com.
>>
> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/jenkinsci-dev/2c3727e4-cb36-4805-871d-af490560f845n%40googlegroups.com
>>  
>> 
>> .
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/12f04995-3b7d-45d8-96df-403ea81da7afn%40googlegroups.com.