opensearch-project / opensearch-build-libraries

Apache License 2.0
6 stars 23 forks source link

Upgrade Jenkins core version to 2.426.3 #435

Closed Divyaasm closed 1 month ago

Divyaasm commented 1 month ago

Description

Upgrade Jenkins core version

Issues Resolved

https://github.com/opensearch-project/opensearch-ci/issues/389

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license. For more information on following Developer Certificate of Origin and signing off your commits, please check here.

gaiksaya commented 1 month ago

Hi @Divyaasm Can you see if you can remove org.jenkins-ci.plugins dependencies? We added some of them to resolve the CVEs but since overall we are bumping the version, I don't think they are valid anymore.

Divyaasm commented 1 month ago

Hi @Divyaasm Can you see if you can remove org.jenkins-ci.plugins dependencies? We added some of them to resolve the CVEs but since overall we are bumping the version, I don't think they are valid anymore.

Sure, will take a look.

Divyaasm commented 1 month ago

Hi @Divyaasm Can you see if you can remove org.jenkins-ci.plugins dependencies? We added some of them to resolve the CVEs but since overall we are bumping the version, I don't think they are valid anymore.

Hey @gaiksaya, tried by removing the dependencies, I've noticed that an older version than previously specified is being pulled. Shall we move forward with the current changes?

gaiksaya commented 1 month ago

Hi @Divyaasm Can you see if you can remove org.jenkins-ci.plugins dependencies? We added some of them to resolve the CVEs but since overall we are bumping the version, I don't think they are valid anymore.

Hey @gaiksaya, tried by removing the dependencies, I've noticed that an older version than previously specified is being pulled. Shall we move forward with the current changes?

Sure! Thanks!

prudhvigodithi commented 1 month ago

@Divyaasm @gaiksaya Should this change be backported ?

gaiksaya commented 1 month ago

@Divyaasm @gaiksaya Should this change be backported ?

Yes! Thanks!