Re: Spring Security upgrade from 5.x to 6.x

[Tim Jacomb]

Sounds good to me

On Sat, 11 May 2024 at 04:08, Mark Waite  wrote:

>
>
> On Friday, May 10, 2024 at 12:51:46 PM UTC-6 Basil wrote:
>
> Based on my prototyping in JENKINS-73120, there is quite a bit of work
> to support Jetty 12 (even just EE 8 with javax imports), blocked on
> the requirement of Java 17. From my perspective the sooner we require
> Java 17, the better. Perhaps we can require Java 17 in weeklies two
> weeks earlier than planned, acknowledging that this creates two fewer
> choices for LTS selection. Thoughts?
>
>
> I like the idea.  It would mean that the LTS baseline selected for the
> last Jenkins LTS to support Java 11 would need to be two weeks earlier,
> but we've chosen LTS baselines that were not the most recent weekly
> before.
>
> Mark Waite
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/450e7eff-2c7b-4aba-a10a-979aa7dba9a2n%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3BidRaVECsQ1p-snXTcQEsMmAdekQwLxHhe6YJRTuzGb6TA%40mail.gmail.com.

Re: Spring Security upgrade from 5.x to 6.x

[Mark Waite]

On Friday, May 10, 2024 at 12:51:46 PM UTC-6 Basil wrote:

Based on my prototyping in JENKINS-73120, there is quite a bit of work 
to support Jetty 12 (even just EE 8 with javax imports), blocked on 
the requirement of Java 17. From my perspective the sooner we require 
Java 17, the better. Perhaps we can require Java 17 in weeklies two 
weeks earlier than planned, acknowledging that this creates two fewer 
choices for LTS selection. Thoughts? 


I like the idea.  It would mean that the LTS baseline selected for the
last Jenkins LTS to support Java 11 would need to be two weeks earlier,
but we've chosen LTS baselines that were not the most recent weekly
before.

Mark Waite

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/450e7eff-2c7b-4aba-a10a-979aa7dba9a2n%40googlegroups.com.

Re: Spring Security upgrade from 5.x to 6.x

[Basil Crow]

Based on my prototyping in JENKINS-73120, there is quite a bit of work
to support Jetty 12 (even just EE 8 with javax imports), blocked on
the requirement of Java 17. From my perspective the sooner we require
Java 17, the better. Perhaps we can require Java 17 in weeklies two
weeks earlier than planned, acknowledging that this creates two fewer
choices for LTS selection. Thoughts?

On Thu, Mar 28, 2024 at 3:42 PM Mark Waite  wrote:
>
> The Spring project has announced that Spring Security 5.8.x and Spring 
> Framework 5.3.x will be end of life on August 31, 2024.  Jenkins currently 
> uses  Spring Security 5.8.x and Spring Framework 5.3.x.
>
> Jenkins needs to upgrade to Spring Security 6.x.  Spring Security 6.x in 
> Jenkins requires:
>
> Spring Framework 6.x which requires Java 17 and Jakarta EE 9
>
> When Jenkins transitions from Jakarta EE 8 to Jakarta EE 9, we'll also need 
> to use:
>
> Jetty 12
> Apache file uploader 2.x
>
> Given the size of that change and its dependency on Java 17 as a minimum 
> Jenkins version, I think that we want to switch Jenkins to require Java 17 as 
> soon as possible after the last Java 11 LTS baseline is selected.
>
> Proposed Timeline
>
> 26 Jun 2024 - Choose LTS baseline for last LTS to support Java 11
> 3 Jul 2024 - Require Java 17 in Jenkins weekly release
> 7 Aug 2024 -Last LTS.1 release to support Java 11 (likely 2.464.1)
> 31 Aug 2024 Spring Security 5.8.x public support ends
> 18 Sep 2024 - Choose LTS baseline to require Java 17
> 2 Oct 2024 - Last LTS.3 to support Java 11
> 30 Oct 2024 - First LTS.1 to require Java 17 (likely 2.476.1)
>
> Basil prototyped the Jakarta EE 9 upgrade in August 2023.  The prototype 
> showed that the bridge method injector may help with the transition.  The 
> prototype showed that there is a lot of work to be done in order to upgrade 
> Spring Security in Jenkins from 5.x to 6.x
>
> I noted the timeline because I had initially assumed that we would transition 
> Jenkins weekly to require Java 17 in late August or early September 2024.  
> Based on the large amount of work that is needed for the Spring Security 
> upgrade from 5.x to 6.x, I think that we should require Java 17 the week 
> after we've selected the baseline for the final LTS line that will support 
> Java 11.
>
> If you're willing to help with the Spring Security upgrade project, I'd love 
> to have you respond to this email message.  If you have strong objections to 
> the timeline, please respond with your concerns.
>
> I will share more details as I learn more.
>
> Thanks,
> Mark Waite
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/jenkinsci-dev/4a260cec-dbe4-4b63-a9e6-7c17ebcbfaebn%40googlegroups.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjoVOivWGGAwob%2BLnBj5WRwNrzyDoUgwLqWUaohYyhRnKw%40mail.gmail.com.

Re: Unable to Release Plugin

[selvavi...@gmail.com]

Hi,
Repository link - https://github.com/jenkinsci/zohosprints-plugin

On Friday, May 10, 2024 at 1:23:55 PM UTC+5:30 adrien.lec...@gmail.com 
wrote:

> Hi, 
>
> Could you problem the link of the plugin repository? 
> This looks like the version on the project is not suffixed with 
> `-SNAPSHOT` which probably means it wasn't reset after previous release or 
> was manually removed since.
>
> Le ven. 10 mai 2024, 08:33, selvavi...@gmail.com  a 
> écrit :
>
>> Hi Team,
>> I revamped the existing plug-in and tried to release a latest version. 
>> However i got error and unable to release the plugin. During previous 
>> release i did not face the issue like this.
>>
>> Kindly assist me to release the plugin.
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Jenkins Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to jenkinsci-de...@googlegroups.com.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/jenkinsci-dev/28cdfff9-e4ee-4953-bd94-df391289a45an%40googlegroups.com
>>  
>> 
>> .
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/d2ef3298-e228-42b6-99ca-418f2f754bdfn%40googlegroups.com.

Re: Unable to Release Plugin

[Adrien Lecharpentier]

Hi,

Could you problem the link of the plugin repository?
This looks like the version on the project is not suffixed with `-SNAPSHOT`
which probably means it wasn't reset after previous release or was manually
removed since.

Le ven. 10 mai 2024, 08:33, selvavi...@gmail.com 
a écrit :

> Hi Team,
> I revamped the existing plug-in and tried to release a latest version.
> However i got error and unable to release the plugin. During previous
> release i did not face the issue like this.
>
> Kindly assist me to release the plugin.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/28cdfff9-e4ee-4953-bd94-df391289a45an%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAKwJSvyHbbEBcoFpX6RvCx6fm7oJb_CEY%2BujFsaMkqPUMPfSVw%40mail.gmail.com.