-
Notifications
You must be signed in to change notification settings - Fork 593
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(deps): update dependency org.jenkins-ci.plugins.workflow:workflow-support to v2.18 [security] #5021
Open
renovate
wants to merge
1
commit into
master
Choose a base branch
from
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
3 times, most recently
from
August 30, 2024 12:48
80def24
to
2a5604b
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
7 times, most recently
from
September 12, 2024 07:17
e90d42b
to
a9d4794
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
7 times, most recently
from
September 17, 2024 11:11
0239f99
to
a4975d6
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
2 times, most recently
from
September 26, 2024 07:23
7e62e9b
to
9166d35
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
8 times, most recently
from
October 8, 2024 11:00
103148b
to
b62bd81
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
2 times, most recently
from
October 9, 2024 09:36
0a4081a
to
ccd6681
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
11 times, most recently
from
January 9, 2025 14:30
eefdd89
to
4b504a8
Compare
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
3 times, most recently
from
January 15, 2025 16:13
e922675
to
feebb38
Compare
maxcask
approved these changes
Jan 17, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Target version has security fix and doesn't contain any breaking changes. Besides v2.18 released in 2018, so no issues expected.
/go-it |
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
11 times, most recently
from
January 23, 2025 15:18
b460e7a
to
9444b8d
Compare
…-support to v2.18 [security]
renovate
bot
force-pushed
the
renovate/maven-org.jenkins-ci.plugins.workflow-workflow-support-vulnerability
branch
from
January 23, 2025 15:36
9444b8d
to
bb2f9f0
Compare
Quality Gate passedIssues Measures |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.13
->2.18
GitHub Vulnerability Alerts
CVE-2018-1000058
Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.
Release Notes
jenkinsci/workflow-support-plugin (org.jenkins-ci.plugins.workflow:workflow-support)
v2.18
Release date: 2018-02-05
issue
v2.17
Release date: 2018-01-22
granular control of when/how they write to disk
(JENKINS-47172)
attached before being written (cuts writes ~1/2 or more)
storage
(JENKINS-47173)
bulk streaming read/writes, and faster access.
see Jenkins documentation for Pipeline Scalability for what you
need to enable this.
XStream Aliases
(JENKINS-49084)
size-on-disk (and data written) by about 30%
version CANNOT be read by older versions of this plugin
serialization
interrupt threads and notes that this is happening
(PR#48)
(JENKINS-31576)
break Pipeline
Timeout utility: ensure that the timeout threadpool cannot be
lazy-initialized with a GroovyClassloader as its contextClassloader
v2.16
Release date: 2017-10-13
a default implementation of StepExecution.stop
for debugging
v2.15
Release date: 2017-09-26
Integrate patched version of JBoss Marshalling with better
diagnostics
/
JENKINS-45553
Massively improve performance of pipeline with numerous parallel
branches by using the new isActive API from workflow-api 2.22.
followup: Add an arguments column to the FlowGraphTable display
Fix Environment Variables Handling: Include AbstractBuild Env vars
in build variables
getChangeSets
- #41
v2.14
Release date: 2017-03-31
Make
currentBuild.duration
work.Added a
currentResult
property andresultIsBetterOrEqualTo
/resultIsWorseOrEqualTo
methods tocurrentBuild
and the returnvalue of
build
.Speedup of log-related code run when adding a new step when using a
massive number of
parallel
branches.JENKINS-26137.
JENKINS-42556:
tolerate errors encountered when printing progress of build
resumption tasks.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.