Skip to content

automated plugin release#404

Merged
simonelbaz merged 2 commits into
jenkinsci:releasepluginghfrom
simonelbaz:releaseplugingh
May 23, 2025
Merged

automated plugin release#404
simonelbaz merged 2 commits into
jenkinsci:releasepluginghfrom
simonelbaz:releaseplugingh

Conversation

@simonelbaz
Copy link
Copy Markdown
Contributor

@simonelbaz simonelbaz commented May 4, 2025

Align repository with

Testing done

Submitter checklist

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • Ensure you have provided tests - that demonstrates feature works or fixes the issue

@simonelbaz simonelbaz self-assigned this May 4, 2025
@simonelbaz simonelbaz marked this pull request as draft May 14, 2025 11:45
@QueryParameter String zone,
@QueryParameter long cleanfreq
) {
public ListBoxModel doFillNameItems(

Check warning

Code scanning / Jenkins Security Scan

Stapler: Missing permission check Warning

Potential missing permission check in Desc#doFillNameItems
@Restricted(DoNotUse.class)
@RequirePOST
public FormValidation doCheckName(@QueryParameter String value,
public FormValidation doCheckName(

Check warning

Code scanning / Jenkins Security Scan

Stapler: Missing permission check Warning

Potential missing permission check in Desc#doCheckName
@OsAuthDescriptor.InjectOsAuth
@RequirePOST
public ListBoxModel doFillNameItems(@QueryParameter String name, @QueryParameter String endPointUrl, @QueryParameter boolean ignoreSsl, @QueryParameter String credentialsId, @QueryParameter String zone, @QueryParameter long cleanfreq) {
public ListBoxModel doFillNameItems(

Check warning

Code scanning / Jenkins Security Scan

Stapler: Missing permission check Warning

Potential missing permission check in Desc#doFillNameItems
@Restricted(DoNotUse.class)
@RequirePOST
public FormValidation doCheckName(@QueryParameter String value,
public FormValidation doCheckName(

Check warning

Code scanning / Jenkins Security Scan

Stapler: Missing permission check Warning

Potential missing permission check in Desc#doCheckName
@simonelbaz simonelbaz force-pushed the releaseplugingh branch 2 times, most recently from d5c315c to 998019a Compare May 19, 2025 13:41
@simonelbaz simonelbaz marked this pull request as ready for review May 19, 2025 16:21
Comment thread plugin/pom.xml Outdated
Comment thread plugin/pom.xml Outdated
Comment thread plugin/pom.xml Outdated
Comment thread plugin/pom.xml Outdated
Comment thread plugin/pom.xml Outdated
Comment thread plugin/pom.xml Outdated
Copy link
Copy Markdown

@mawinter69 mawinter69 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good now from dependency side

Copy link
Copy Markdown

@mawinter69 mawinter69 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the plugin still packs the jackson libraries. So you need to add exclusion to the 2 openstack4j dependencies:

        <exclusion>
          <groupId>com.fasterxml.jackson.core</groupId>
          <artifactId>*</artifactId>
        </exclusion>
        <exclusion>
          <groupId>com.fasterxml.jackson.databind</groupId>
          <artifactId>*</artifactId>
        </exclusion>
        <exclusion>
          <groupId>com.fasterxml.jackson.dataformat</groupId>
          <artifactId>*</artifactId>
        </exclusion>

and add a dependency to the jackson-api plugin

    <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>jackson2-api</artifactId>
    </dependency>

Comment thread plugin/pom.xml Outdated
<dependency>
<groupId>org.jenkins-ci.plugins</groupId>
<artifactId>cloud-stats</artifactId>
<version>377.vd8a_6c953e98e</version>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

version can be removed as it is in the bom

Comment thread plugin/pom.xml Outdated
<dependency>
<groupId>org.jenkins-ci.plugins</groupId>
<artifactId>config-file-provider</artifactId>
<version>3.7.1</version>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

version can be removed as it is in the bom

Comment thread plugin/pom.xml Outdated
<dependency>
<groupId>io.jenkins</groupId>
<artifactId>configuration-as-code</artifactId>
<version>1967.va_968e15fd05b_</version>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

version can be removed as it is in the bom

Comment thread plugin/pom.xml Outdated
<dependency>
<groupId>io.jenkins.configuration-as-code</groupId>
<artifactId>test-harness</artifactId>
<version>1967.va_968e15fd05b_</version>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

version can be removed as it is in the bom.

Comment thread plugin/pom.xml
<!-- </dependency>-->
</dependencies>
<!-- Test Dependencies -->
<dependency>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hamcrest is provided by the parent pom. But removing this leads to test errors. So something to follow up on

Comment thread plugin/pom.xml
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.mockito</groupId>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That is a quite old mockito version. So something to follow up on.

Comment thread plugin/pom.xml Outdated
Comment on lines +100 to +109
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-classworlds</artifactId>
<version>2.4.2</version>
</dependency>
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-utils</artifactId>
<version>3.5.1</version>
</dependency>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are the dependencies to plexus needed?
Tests are successful without them.

Comment thread plugin/pom.xml Outdated
</dependency>
<!-- Hardcoding upper-bound versions of dependencies -->
<dependency>
<groupId>org.jenkins-ci</groupId>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This dependency is not needed I think.

Comment thread plugin/pom.xml Outdated
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.jenkins-ci</groupId>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This dependency is not needed I think.

@mawinter69
Copy link
Copy Markdown

With all the deps removed the hpi is down from 7 MiB to 2 MiB

Copy link
Copy Markdown

@mawinter69 mawinter69 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add an explicit dependency to

<dependency>
    <groupId>org.jenkins-ci.plugins</groupId>
    <artifactId>jackson2-api</artifactId>
</dependency>

Currently it will only work because dependent plugins depend on it as well.

Copy link
Copy Markdown

@mawinter69 mawinter69 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good from dependency perspective. Everything that is available as an api plugin is no longer packed in the hpi.

I can't really judge the other changes as I can't try out the plugin against a real openstack installation.

@simonelbaz
Copy link
Copy Markdown
Contributor Author

Looks good from dependency perspective. Everything that is available as an api plugin is no longer packed in the hpi.

I can't really judge the other changes as I can't try out the plugin against a real openstack installation.

Thanks a lot. I am testing the #389 fix against a devstack instance.

@simonelbaz simonelbaz merged commit d2a20f9 into jenkinsci:releaseplugingh May 23, 2025
17 checks passed
@simonelbaz simonelbaz deleted the releaseplugingh branch May 23, 2025 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants