[JENKINS-41711] Prevent installation of plugins with unresolvable dependencies

[timja]

The update center and setup wizard allows users to install plugins with unresolved dependencies. In this case, the update center meta-data presents a plugin having a dependency which cannot be resolved from any available update center. The user is presently able to install the plugin, but when Jenkins starts up, it will fail to initialize due to the unresolved dependencies.

The setupwizard and update center should not allow the user to screw up their installation and thereby protect the user from mistakes or time-delays in publishing dependencies.

Instead, the setupwizard and the update center should display warnings that the plugin dependencies cannot be satisified and which dependencies are missing.

---

Originally reported by recampbell, imported from: Prevent installation of plugins with unresolvable dependencies

• status: Open
• priority: Major
• resolution: Unresolved
• imported: 2022/01/10

[timja]

danielbeck:

… or just hide plugins with broken dependencies.

FWIW the setup wizard checks that the offered plugin is compatible with the current release and only offers then – needs to ensure dependencies are satisfied as well at the same location.

https://github.com/jenkinsci/jenkins/blob/c4dcffaf4d08f087ed521682349de194a4fac1b7/core/src/main/java/jenkins/install/SetupWizard.java#L420

[timja]

danielbeck:

Alternatively, this could be something the update center could do – only offer plugins with satisfied dependencies. This would also prevent this problem on past releases of Jenkins.

[timja]

[Originally related to: JENKINS-23757]