search

jenkins-infra / helpdesk

Open your Infrastructure related issues here for the Jenkins project
https://github.com/jenkins-infra/helpdesk/issues/new/choose
17 stars 10 forks source link

[INFRA-2487] Remove deprecated analysis plugins from update center #2089

Closed jenkins-infra-bot closed 3 years ago

jenkins-infra-bot commented 4 years ago

The old static analysis plugins should be removed from the update center:
https://github.com/jenkins-infra/update-center2/blob/master/src/main/resources/artifact-ignores.properties

See discussion in https://github.com/jenkins-infra/update-center2/pull/345

Originally reported by drulli, imported from: Remove deprecated analysis plugins from update center
  • assignee: drulli
  • status: Closed
  • priority: Minor
  • resolution: Fixed
  • resolved: 2021-02-11T14:38:16+01:00
  • imported: 2022/01/10
jenkins-infra-bot commented 4 years ago

danielbeck:

As of today, doing this will necessitate suspending distributions of the following plugins:

 

jenkins-infra-bot commented 4 years ago

drulli:

This is quite interesting I never realized that there are so many other tools using the plugins.

jenkins-infra-bot commented 4 years ago

danielbeck:

Ulli Hafner Is this issue still something you'd like to see implemented? If so I recommend starting a dev list conversation given the downstream impact.

jenkins-infra-bot commented 4 years ago

drulli:

Well, I'll at least ping the authors of those plugins first...

jenkins-infra-bot commented 4 years ago

drulli:

I went through the list and tried to consolidate the usage of analysis-core.

These plugins can be removed already (already marked as deprecated or archived):

That plugin just "collects" other plugins and can be removed as well:

These plugins look outdated and are not maintained anymore:

I informed the following plugin authors about the end-of-life notice of analysis-core:

So it might make sense to leave analysis-core active until I get an answer of the latter three plugins . But it would be helpful to archive the other ones that depend on analysis core. What do you think?

jenkins-infra-bot commented 4 years ago

danielbeck:

brakeman depends on analysis-core

Last normal release in mid 2017, since then only a security update. Would contact the maintainer about this.

CFLint depends on analysis-core

39 installs, last release 5 years ago. Would ignore.

swamp depends on analysis-core

Seems active, but just 18 reported installs should allow more flexibility in doing a major upgrade (e.g. integrating with warnings-ng instead).

With https://github.com/jenkinsci/jenkins/pull/4073 additionally, it'll be more painful for users to keep such plugins around.

 

jenkins-infra-bot commented 4 years ago

drulli:

Yes, I pinged all three authors already. I'm not sure if we should wait for a reply...

jenkins-infra-bot commented 4 years ago

danielbeck:

Yes, I pinged all three authors already. I'm not sure if we should wait for a reply...

Any news here Ulli Hafner?

jenkins-infra-bot commented 4 years ago

drulli:

brakeman: see https://github.com/jenkinsci/brakeman-plugin/issues/23 (I'm not sure if we can expect an implementation soon).
No feedback from the other two.

For me it would be ok to remove the plugin now.

jenkins-infra-bot commented 4 years ago

danielbeck:

Brakeman support exists in analysis-model 9.0.0 and newer, integrated into Warnings NG 8.4.2.

jenkins-infra-bot commented 4 years ago

danielbeck:

https://github.com/jenkins-infra/update-center2/pull/466

jenkins-infra-bot commented 3 years ago

drulli:

Brakeman is now released in 8.5.0 warnings plugin.

jenkins-infra-bot commented 3 years ago

danielbeck:

https://github.com/jenkins-infra/update-center2/pull/466

jenkins-infra-bot commented 2 years ago

[Originally related to: JENKINS-55744]

dhruv070601 commented 8 months ago

fingbugs come under which plugin ?

MarkEWaite commented 7 months ago

fingbugs come under which plugin ?

What was "findbugs" is now "spotbugs" and is included in the Warnings plugin.