Re: New Year blogpost for Jenkins

[Oleg Nenashev]

Thanks to everyone who contributed! And sorry that I disappeared 
completely, the court hearing took much more energy than I expected




On Friday, January 14, 2022 at 7:04:27 AM UTC+1 Mark Waite wrote:

> Thanks to all for the suggestions.
>
> Please review the proposed blog post at 
> https://github.com/jenkins-infra/jenkins.io/pull/4821 
>
> I would like to publish before the end of the day in Europe on Friday, 
> January 14, 2022.
>
> Mark Waite
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/305daf8d-b568-4ff2-a73b-f9cbfd21aea7n%40googlegroups.com.

Re: New Year blogpost for Jenkins

[Mark Waite]

Thanks to all for the suggestions.

Please review the proposed blog post 
at https://github.com/jenkins-infra/jenkins.io/pull/4821 

I would like to publish before the end of the day in Europe on Friday, 
January 14, 2022.

Mark Waite

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/468f9eee-8db1-434b-aed9-ec0356263420n%40googlegroups.com.

Re: New Year blogpost for Jenkins

[Basil Crow]

Between 2.274 (2021-01-05) and 2.328 (2022-01-03), we removed 9
outdated dependencies, unforked and upgraded 2 outdated dependencies,
and upgraded 20 other dependencies:

- Removed Akuma
- Removed ASM 5
- Removed ASM 6
- Removed Bytecode Compatibility Transformer
- Removed Commons Digester
- Removed `jna-posix`
- Removed JTidy
- Removed `libpam4j`
- Removed Woodstox
- Unforked Commons FileUpload and upgraded from 1.3.1-jenkins-2 to 1.4
- Unforked Ant and upgraded from 1.10.9 to 1.10.12
- Upgraded Antlr from 2.7.6 to 2.7.7
- Upgraded ASM from 9.0 to 9.2
- Upgraded Commons BeanUtils from 1.9.3 to 1.9.4
- Upgraded Commons Codec from 1.14 to 1.15
- Upgraded Commons Compress from 1.19 to 1.21
- Upgraded Commons Discovery from 0.4 to 0.5
- Upgraded Commons IO from 2.8.0 to 2.11.0
- Upgraded Groovy from 2.4.12 to 2.4.21
- Upgraded Guava from 11.0.1 to 31.0.1
- Upgraded Guice from 4.0 to 5.0.1
- Upgraded Jaxen from 1.1-beta-11 to 1.2.0
- Upgraded jCIFS from 1.3.17-kohsuke-1 to 1.3.18-kohsuke-1
- Upgraded JLine from 2.12 to 2.14.6
- Upgraded JNA from 5.6.0 to 5.10.0
- Upgraded JNR from 3.1.4 to 3.1.14
- Upgraded `json-lib` from 2.4-jenkins-2 to 2.4-jenkins-3
- Upgraded SLF4J from 1.7.30 to 1.7.32
- Upgraded Spring from 5.2.9 to 5.3.14
- Upgraded Spring Security from 5.4.1 to 5.6.1
- Upgraded XStream from 1.4.15 to 1.4.18

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjqK8s2wvrf2Q5ZywB_5vC-%2BmBmRYzzdWd6oEDeDcpNjgQ%40mail.gmail.com.

Re: New Year blogpost for Jenkins

[Alyssa Tong]

For Jenkins is the Way stories, in 2021 we've published:

   - 138 Jenkins users stories
   - 3 Jenkins User Story eBooks


On Wed, Jan 5, 2022 at 5:03 AM Mark Waite  wrote:

> On Wednesday, January 5, 2022 at 5:55:19 AM UTC-7 Daniel Beck wrote:
>
>> On Fri, Dec 24, 2021 at 3:42 PM Mark Waite wrote:
>>
>>>
>>>- Security fixes and improvements
>>>   - 19 security advisories published
>>>
>>> I'm certainly biased here, but our work on agent-to-controller security
>> (both the fixes delivered in early November, as well as JEP-235) is notable
>> in this context. These were pretty horrifying, essentially undermining all
>> the security benefits from distributed builds.
>>
>
>  Agreed.  Thanks for reminding me of that one.  It deserves a specific
> mention even more than the Log4j 2 response deserves mention.  Included in
> my draft outline.
>
> I hope to write the blog post today or tomorrow based on the draft outline
> in the Docs Office Hours notes from Jan 3, 2022
> 
> .
>
> Other suggestions welcomed.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/28ecdc60-2bd0-4f1d-9f0c-13d44e65602cn%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAC9wNazMOdL3ViaE%3DkFdm7sn5Xd_i4iesnFn1xRrzWLyGt%3D_uA%40mail.gmail.com.

Re: New Year blogpost for Jenkins

[Mark Waite]

On Wednesday, January 5, 2022 at 5:55:19 AM UTC-7 Daniel Beck wrote:

> On Fri, Dec 24, 2021 at 3:42 PM Mark Waite wrote:
>
>>
>>- Security fixes and improvements
>>   - 19 security advisories published
>>
>> I'm certainly biased here, but our work on agent-to-controller security 
> (both the fixes delivered in early November, as well as JEP-235) is notable 
> in this context. These were pretty horrifying, essentially undermining all 
> the security benefits from distributed builds.
>

 Agreed.  Thanks for reminding me of that one.  It deserves a specific 
mention even more than the Log4j 2 response deserves mention.  Included in 
my draft outline.

I hope to write the blog post today or tomorrow based on the draft outline 
in the Docs Office Hours notes from Jan 3, 2022 

.

Other suggestions welcomed.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/28ecdc60-2bd0-4f1d-9f0c-13d44e65602cn%40googlegroups.com.

Re: New Year blogpost for Jenkins

['Daniel Beck' via Jenkins Developers]

On Fri, Dec 24, 2021 at 3:42 PM Mark Waite 
wrote:

>
>- Security fixes and improvements
>   - 19 security advisories published
>
> I'm certainly biased here, but our work on agent-to-controller security
(both the fixes delivered in early November, as well as JEP-235) is notable
in this context. These were pretty horrifying, essentially undermining all
the security benefits from distributed builds.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAMo7PtL0%2BM0%3DgHaOqUWPGwOezVynpsad6RTkWSW4%3Db6LLLOakQ%40mail.gmail.com.

Re: New Year blogpost for Jenkins

[Mark Waite]

On Tue, Jan 4, 2022 at 10:06 AM 'Gavin Mogan' via Jenkins Developers <
jenkinsci-dev@googlegroups.com> wrote:

> I was thinking about it last night. We got a few new sponsors this year
>
> * netlify
> * digital ocean
> * 1password
>
> probably more, would be nice to mention them
>
>
Thanks for the reminder!  Yes, I'll include a section of thanks for the new
and renewed sponsors.  Will need to check the sponsorship dates to be sure
the post is accurate, but Algolia for search, Netlify for status site and
preview sites, 1password for securing passwords, Oracle for
archives.jenkins.io, Digital Ocean for Kubernetes agents, and more,.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAO49JtGFNt5qcw_HDgM_559A-A%3Dx-LHS-4ghiDXNhuoe5vb5fQ%40mail.gmail.com.

Re: New Year blogpost for Jenkins

['Gavin Mogan' via Jenkins Developers]

I was thinking about it last night. We got a few new sponsors this year

* netlify
* digital ocean
* 1password

probably more, would be nice to mention them

On Mon, Jan 3, 2022 at 4:59 PM Mark Waite  wrote:
>
> I placed the New Year blogpost on the Docs Office Hours agenda for this week. 
>  Will be discussed during the Asia / Pacific hours in the next 2 hours, then 
> will be discussed again during Europe / Americas hours on Thursday.
>
> See the Jenkins calendar for the precise times of Docs Office Hours.
>
> Mark Waite
>
> On Friday, December 24, 2021 at 7:42:00 AM UTC-7 Mark Waite wrote:
>>
>> On Friday, December 24, 2021 at 7:14:05 AM UTC-7 Oleg Nenashev wrote:
>>>
>>> Hi all,
>>>
>>> So the New Year's coming soon. So now we will need a yearly a report for 
>>> the Continuous Delivery Foundation. I guess we would like to have a 
>>> standard Jenkins blog post this year, right?
>>>
>>> Would anyone be interested to contribute to this blog post? I might be able 
>>> to coordinate the effort though I'm not sure this is very appropriate. I 
>>> haven't been as active for in the community this year as used to be before.
>>>
>>
>> Thanks for the reminder!  I'd like to contribute to that blog post.  I think 
>> we have many things to highlight for this year, including:
>>
>> Outreach events
>>
>> 5 completed projects in Google Summer of Code
>> Over 90 pull requests from Hacktoberfest contributors
>> 5 women in Africa mentored by the She Code Africa contributhon
>> 4 students mentored in master project for Jenkins security
>>
>> New features
>>
>> Configuration form modernization
>> Spring and XStream upgrades
>> Guava upgrade
>> Java 11 now the default in Docker images
>> 6 plugins adopted by contributors
>>
>> Security fixes and improvements
>>
>> 19 security advisories published
>> Apache Log4j 2 incident managed
>>
>> Plugins and Documentation
>>
>> Confluence wiki attack mitigated
>> Plugins site search and documentation site search
>> 38 blog posts
>> Documentation for 200 more plugins migrated to GitHub
>>
>> Social
>>
>> Community.jenkins.io is growing
>> 3000 more followers on Twitter
>> 13000 more followers on LinkedIn
>> Over 9 views on YouTube
>> IRC chat moved to Libera chat
>>
>> I'm open to other highlights that should be noted in the blog post.
>>
>>
>>> Best regards,
>>> Oleg Nenashev
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/jenkinsci-dev/54c9aad0-a87c-456d-9cf1-783e809cd96an%40googlegroups.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAG%3D_Duswcs04F64QXtj6hMRPLm83kj5o-p-5MLxopWj%2BeohiuQ%40mail.gmail.com.

Re: New Year blogpost for Jenkins

[Mark Waite]

I placed the New Year blogpost on the Docs Office Hours agenda 

 
for this week.  Will be discussed during the Asia / Pacific hours in the 
next 2 hours, then will be discussed again during Europe / Americas hours 
on Thursday.

See the Jenkins calendar for the precise times of Docs Office Hours.

Mark Waite

On Friday, December 24, 2021 at 7:42:00 AM UTC-7 Mark Waite wrote:

> On Friday, December 24, 2021 at 7:14:05 AM UTC-7 Oleg Nenashev wrote:
>
>> Hi all,
>>
>> So the New Year's coming soon. So now we will need a yearly a report for 
>> the Continuous Delivery Foundation. I guess we would like to have a 
>> standard Jenkins blog post this year, right?
>>
>> Would anyone be interested to contribute to this blog post? I might be 
>> able to coordinate the effort though I'm not sure this is very appropriate. 
>> I haven't been as active for in the community this year as used to be 
>> before.
>>
>>
> Thanks for the reminder!  I'd like to contribute to that blog post.  I 
> think we have many things to highlight for this year, including:
>
>
>- Outreach events
>   - 5 completed projects in Google Summer of Code
>   - Over 90 pull requests from Hacktoberfest contributors
>   - 5 women in Africa mentored by the She Code Africa contributhon
>   - 4 students mentored in master project for Jenkins security
>- New features
>   - Configuration form modernization
>   - Spring and XStream upgrades
>   - Guava upgrade
>   - Java 11 now the default in Docker images
>   - 6 plugins adopted by contributors
>- Security fixes and improvements
>   - 19 security advisories published
>   - Apache Log4j 2 incident managed
>- Plugins and Documentation
>   - Confluence wiki attack mitigated
>   - Plugins site search and documentation site search
>   - 38 blog posts
>   - Documentation for 200 more plugins migrated to GitHub
>- Social
>   - Community.jenkins.io is growing
>   - 3000 more followers on Twitter
>   - 13000 more followers on LinkedIn
>   - Over 9 views on YouTube
>   - IRC chat moved to Libera chat
>
> I'm open to other highlights that should be noted in the blog post. 
>
>
> Best regards,
>> Oleg Nenashev
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/54c9aad0-a87c-456d-9cf1-783e809cd96an%40googlegroups.com.

Re: New Year blogpost for Jenkins

[Mark Waite]

On Friday, December 24, 2021 at 7:14:05 AM UTC-7 Oleg Nenashev wrote:

> Hi all,
>
> So the New Year's coming soon. So now we will need a yearly a report for 
> the Continuous Delivery Foundation. I guess we would like to have a 
> standard Jenkins blog post this year, right?
>
> Would anyone be interested to contribute to this blog post? I might be 
> able to coordinate the effort though I'm not sure this is very appropriate. 
> I haven't been as active for in the community this year as used to be 
> before.
>
>
Thanks for the reminder!  I'd like to contribute to that blog post.  I 
think we have many things to highlight for this year, including:


   - Outreach events
  - 5 completed projects in Google Summer of Code
  - Over 90 pull requests from Hacktoberfest contributors
  - 5 women in Africa mentored by the She Code Africa contributhon
  - 4 students mentored in master project for Jenkins security
   - New features
  - Configuration form modernization
  - Spring and XStream upgrades
  - Guava upgrade
  - Java 11 now the default in Docker images
  - 6 plugins adopted by contributors
   - Security fixes and improvements
  - 19 security advisories published
  - Apache Log4j 2 incident managed
   - Plugins and Documentation
  - Confluence wiki attack mitigated
  - Plugins site search and documentation site search
  - 38 blog posts
  - Documentation for 200 more plugins migrated to GitHub
   - Social
  - Community.jenkins.io is growing
  - 3000 more followers on Twitter
  - 13000 more followers on LinkedIn
  - Over 9 views on YouTube
  - IRC chat moved to Libera chat
   
I'm open to other highlights that should be noted in the blog post. 


Best regards,
> Oleg Nenashev
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/1c959a1c-e4aa-4a5b-97a3-b47707b717d0n%40googlegroups.com.

New Year blogpost for Jenkins

[Oleg Nenashev]

Hi all,

So the New Year's coming soon. So now we will need a yearly a report for
the Continuous Delivery Foundation. I guess we would like to have a
standard Jenkins blog post this year, right?

Would anyone be interested to contribute to this blog post? I might be able
to coordinate the effort though I'm not sure this is very appropriate. I
haven't been as active for in the community this year as used to be before.

Best regards,
Oleg Nenashev

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAPfivLBTyBdzX0Jj4EaHtkrqWZ2s09WW3L3Q24Lqh1KW%2BZ_JaA%40mail.gmail.com.