FTR I've removed guava in all maintained azure plugins today (except azure-ad, needs a follow up to move to caffeine cache)
Hopefully it's easy to generate your list again, is there a script? On Fri, 7 May 2021 at 11:09, [email protected] <[email protected]> wrote: > HI Basil, > > Apologies I said I was going to send this information and didn't get fully > round to it. > > I have an list (attached) of all the braking APIs, and have another list > of all plugins that (potentially) use one of the breaking methods either > directly (in the plugins main library) or indirectly (via a library bundled > with the plugin) The identifications of plugins does include false > positives (so is a worst case scenario) due to the nature of the scanning > tool I used (https://github.com/jenkins-infra/usage-in-plugins/pull/20) > . This list is not filtered so also includes CloudBees proprietary plugins. > > in summary the following plugins are all potentially affected (some may be > only false positives): > > > - > - 42crunch-security-audit > - active-directory > - alauda-kubernetes-support > - alauda-pipeline > - alibabacloud-ecs > - anchore-container-scanner > - antisamy-markup-formatter > - argus-notifier > - artifact-manager-s3 > - artifactory > - atlassian-jira-software-cloud > - audit-trail > - aws-beanstalk-publisher-plugin > - aws-sqs > - aws-yum-parameter > - azure-acs > - azure-ad > - azure-app-service > - azure-batch-parallel > - azure-commons > - azure-container-agents > - azure-container-registry-tasks > - azure-credentials > - azure-dev-spaces > - azure-function > - azure-vm-agents > - azure-vmss > - bart > - behave-testresults-publisher > - bitbucket-pullrequest-builder > - blackduck-detect > - blueocean-bitbucket-pipeline > - blueocean-commons > - blueocean-git-pipeline > - blueocean-github-pipeline > - blueocean-jira > - blueocean-pipeline-api-impl > - blueocean-pipeline-scm-api > - blueocean-rest > - blueocean-rest-impl > - browserstack-integration > - build-failure-analyzer > - build-history-metrics-plugin > - build-monitor-plugin > - build-user-vars-plugin > - caliper-ci > - cerberus-testing > - checkmarx > - cloudbees-analytics > - cloudbees-api-client > - cloudbees-assurance > - cloudbees-github-reporting > - cloudbees-jsync-archiver > - cloudbees-platform-common > - cloudbees-rbac-auto-configurer > - cloudbees-servicenow-jenkins-plugin > - cloudbees-unified-ui > - cloudbees-workflow-template > - cloudfoundry-bosh-cli > - cloudhub-deployer > - codebeamer-coverage-publisher > - coding-webhook > - collabnet > - compuware-ispw-operations > - configuration-as-code > - confluence-publisher > - consul-kv-builder > - coverity > - cucumber-reports > - cucumber-testresult-plugin > - database > - debian-package-builder > - defensics > - delivery-pipeline-plugin > - depgraph-view > - deploydb > - deployit-plugin > - deployment-sphere > - devoptics > - discobit-autoconfig > - docker-build-step > - docker-java-api > - docker-plugin > - docker-traceability > - DotCi > - DotCi-InstallPackages > - DotCiInstallPackages > - easyqa > - ec2 > - ec2-deployment-dashboard > - ec2-fleet > - elastest > - elasticbox > - electricflow > - envinject > - envinject-api > - esr-feeder > - esr-reporter > - Exclusion > - extreme-feedback > - ez-templates > - flaky-test-handler > - gating-core > - gcp-secrets-manager-credentials-provider > - gcr-scanner > - gearman-plugin > - gerrit-code-review > - gerrit-trigger > - gerrit-verify-status-reporter > - ghprb > - git-bisect > - git-changelog > - git-client > - gitee > - github > - github-autostatus > - github-oauth > - github-pullrequest > - gitlab-oauth > - gitlab-plugin > - gogs-webhook > - google-admin-sdk > - google-analytics-usage-reporter > - google-cloud-backup > - google-cloud-health-check > - google-cloudbuild > - google-compute-engine > - google-container-registry-auth > - google-deployment-manager > - google-kubernetes-engine > - google-oauth-plugin > - google-source-plugin > - google-storage-plugin > - gradle > - gravatar > - headspin > - hipchat > - http_request > - hubot-steps > - hudson-wsclean-plugin > - ibm-cloud-devops > - in-toto > - inedo-buildmaster > - inedo-proget > - influxdb-query > - instana > - ios-device-connector > - ircbot > - jacoco > - jclouds-jenkins > - jenkins-cloudfoundry-uaa > - jgiven > - jira > - jira-steps > - jira-trigger > - JiraTestResultReporter > - jms-messaging > - job-node-stalker > - jobgenerator > - jslint > - junit > - kubernetes > - kubernetes-cd > - label-linked-jobs > - lambdatest-automation > - loadimpact-plugin > - logstash > - mabl-integration > - machine-learning > - marathon > - master-provisioning-core > - master-provisioning-kubernetes > - maven-dependency-update-trigger > - maven-invoker-plugin > - maven-release-cascade > - mesos > - minio > - minio-storage > - miniorange-saml-sp > - nectar-vmware > - neoload-jenkins-plugin > - nodelabelparameter > - nodepool-agents > - octoperf > - ontrack > - openedge > - openshift-deployer > - openshift-login > - openstack-cloud > - openstack-heat > - opentelemetry > - operations-center-analytics > - operations-center-analytics-feeder > - operations-center-analytics-reporter > - operations-center-context > - operations-center-monitoring > - operations-center-server > - operations-center-sso > - oracle-cloud-infrastructure-compute > - package-parameter > - parameterized-trigger > - perfecto > - performance > - periodicbackup > - pipeline-aws > - pipeline-cloudwatch-logs > - pipeline-huaweicloud-plugin > - pipeline-model-api > - pipeline-model-definition > - project-inheritance > - radargun-reporting > - rally-plugin > - rapid7-insightvm-container-assessment > - release-helper > - reliza-integration > - relution-publisher > - repository > - repository-connector > - requests > - rocketchatnotifier > - role-strategy > - rundeck > - sahagin > - saml > - sauce-ondemand > - scm-api > - scm-httpclient > - scm-manager > - scm-sqs > - scm-sync-configuration > - screenrecorder > - sectioned-view > - seed > - selenium > - selenium-builder > - service-fabric > - service-now > - servicenow-cicd > - sitemonitor > - slave-proxy > - smilehubnotifier > - sms > - sonar > - sonar-gerrit > - split-admin > - splunk-devops > - splunk-devops-extend > - spoonscript > - spring-config > - spring-initalzr > - srcclr-installer > - ssh-slaves > - stackrox-container-image-scanner > - sysdig-secure > - telegram-notifications > - telerik-appbuilder-plugin > - testInProgress > - testsigma > - tics > - timestamper > - tuleap-api > - tuleap-git-branch-source > - uipath-automation-package > - unleash > - usemango-runner > - venafi-vcert > - violation-comments-to-stash > - vmware-vrealize-automation-plugin > - vrealize-automation-8 > - vsphere-cloud > - whitesource > - wikitext > - workflow-api > - workflow-basic-steps > - workflow-cps > - workflow-support > - xframium > - xlrelease-plugin > - xvnc > - yet-another-docker-plugin > - zanata > - zephyr-for-jira-test-management > - zos-connector > > > I am wondering how best we should co-ordinate this work? CloudBees has > already provided some of the plugins above to entirely remove Guava (rather > than just make it forward and backward compatible). Some of the plugins on > the list are also up-for adoption with no active maintainer. (similar to > the Digester work I suggest that if thiese are not popular plugins they > maybe have a PR and that is as far as it goes). > > Ontop of this as updating all the plugins could take a while I have > another JEP that I need to file and CloudBees is investigating to isolate > core/plugin libraries. If we had that it would potentially enable us to > have a detached jenkins-2.xxx-compat plugin that bundled the old Guava and > bump & isolate guava in core before all plugins had been updated (Ideally > we would like to remove the Guava library however it is required by Guice) > > Regards > > /James > > On Friday, May 7, 2021 at 10:04:52 AM UTC+1 [email protected] wrote: > >> blueocean is WIP https://github.com/jenkinsci/blueocean-plugin/pull/2163 >> (please >> don't create separate PR) >> >> On Fri, 7 May 2021 at 12:40, Basil Crow <[email protected]> wrote: >> >>> I started looking into which plugins use classes or methods from Guava >>> 11 that have been removed in Guava 30. There is plenty of low-hanging >>> fruit if anyone is interested in contributing by rewriting these >>> usages. The list below is far from exhaustive, but it's a start. If >>> you maintain one of these plugins, consider taking some proactive >>> steps to migrate away from these APIs. >>> >>> com/google/common/base/Objects#firstNonNull >>> - blueocean-pipeline-api-impl >>> - blueocean-pipeline-scm-api >>> - ec2-fleet >>> - gearman-plugin >>> - github >>> - jclouds-jenkins >>> - jira >>> >>> com/google/common/base/Objects#toStringHelper >>> - blueocean-rest-impl >>> - build-monitor-plugin >>> - cloudfoundry-bosh-cli >>> - docker-plugin >>> - extreme-feedback >>> - google-source-plugin >>> - gravatar >>> - repository >>> - splunk-devops-extend >>> >>> com/google/common/base/Stopwatch#elapsedMillis >>> - build-monitor-plugin >>> >>> com/google/common/base/Stopwatch#elapsedTime >>> - relution-publisher >>> - vsphere-cloud >>> >>> com/google/common/collect/Ranges >>> - audit-trail >>> - elastest >>> - http_request >>> - logstash >>> - scm-httpclient >>> >>> com/google/common/io/Files#newOutputStreamSupplier >>> - repository-connector >>> >>> com/google/common/net/InternetDomainName#name >>> - scm-api >>> >>> com/google/common/util/concurrent/MoreExecutors#sameThreadExecutor >>> - workflow-basic-steps >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Jenkins Developers" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjo5UfMB70nRvn4oG-KZ1GAy8MaAxBZPsEP8V3zJyOyZsg%40mail.gmail.com >>> . >>> >> >> >> -- >> Olivier Lamy >> http://twitter.com/olamy | http://linkedin.com/in/olamy >> > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Developers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-dev/44efda9d-e987-4e7e-9be4-ad43e64bfb71n%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-dev/44efda9d-e987-4e7e-9be4-ad43e64bfb71n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3Bid9C80zmcw4pO%2B_wWMJXzwWzXwYw3tZP9jFz1ARpeq6-A%40mail.gmail.com.
