I see you used usage in plugins :) On Fri, 7 May 2021 at 11:14, Tim Jacomb <timjaco...@gmail.com> wrote:
> FTR I've removed guava in all maintained azure plugins today (except > azure-ad, needs a follow up to move to caffeine cache) > > Hopefully it's easy to generate your list again, is there a script? > > On Fri, 7 May 2021 at 11:09, jn...@cloudbees.com <jn...@cloudbees.com> > wrote: > >> HI Basil, >> >> Apologies I said I was going to send this information and didn't get >> fully round to it. >> >> I have an list (attached) of all the braking APIs, and have another list >> of all plugins that (potentially) use one of the breaking methods either >> directly (in the plugins main library) or indirectly (via a library bundled >> with the plugin) The identifications of plugins does include false >> positives (so is a worst case scenario) due to the nature of the scanning >> tool I used (https://github.com/jenkins-infra/usage-in-plugins/pull/20) >> . This list is not filtered so also includes CloudBees proprietary plugins. >> >> in summary the following plugins are all potentially affected (some may >> be only false positives): >> >> >> - >> - 42crunch-security-audit >> - active-directory >> - alauda-kubernetes-support >> - alauda-pipeline >> - alibabacloud-ecs >> - anchore-container-scanner >> - antisamy-markup-formatter >> - argus-notifier >> - artifact-manager-s3 >> - artifactory >> - atlassian-jira-software-cloud >> - audit-trail >> - aws-beanstalk-publisher-plugin >> - aws-sqs >> - aws-yum-parameter >> - azure-acs >> - azure-ad >> - azure-app-service >> - azure-batch-parallel >> - azure-commons >> - azure-container-agents >> - azure-container-registry-tasks >> - azure-credentials >> - azure-dev-spaces >> - azure-function >> - azure-vm-agents >> - azure-vmss >> - bart >> - behave-testresults-publisher >> - bitbucket-pullrequest-builder >> - blackduck-detect >> - blueocean-bitbucket-pipeline >> - blueocean-commons >> - blueocean-git-pipeline >> - blueocean-github-pipeline >> - blueocean-jira >> - blueocean-pipeline-api-impl >> - blueocean-pipeline-scm-api >> - blueocean-rest >> - blueocean-rest-impl >> - browserstack-integration >> - build-failure-analyzer >> - build-history-metrics-plugin >> - build-monitor-plugin >> - build-user-vars-plugin >> - caliper-ci >> - cerberus-testing >> - checkmarx >> - cloudbees-analytics >> - cloudbees-api-client >> - cloudbees-assurance >> - cloudbees-github-reporting >> - cloudbees-jsync-archiver >> - cloudbees-platform-common >> - cloudbees-rbac-auto-configurer >> - cloudbees-servicenow-jenkins-plugin >> - cloudbees-unified-ui >> - cloudbees-workflow-template >> - cloudfoundry-bosh-cli >> - cloudhub-deployer >> - codebeamer-coverage-publisher >> - coding-webhook >> - collabnet >> - compuware-ispw-operations >> - configuration-as-code >> - confluence-publisher >> - consul-kv-builder >> - coverity >> - cucumber-reports >> - cucumber-testresult-plugin >> - database >> - debian-package-builder >> - defensics >> - delivery-pipeline-plugin >> - depgraph-view >> - deploydb >> - deployit-plugin >> - deployment-sphere >> - devoptics >> - discobit-autoconfig >> - docker-build-step >> - docker-java-api >> - docker-plugin >> - docker-traceability >> - DotCi >> - DotCi-InstallPackages >> - DotCiInstallPackages >> - easyqa >> - ec2 >> - ec2-deployment-dashboard >> - ec2-fleet >> - elastest >> - elasticbox >> - electricflow >> - envinject >> - envinject-api >> - esr-feeder >> - esr-reporter >> - Exclusion >> - extreme-feedback >> - ez-templates >> - flaky-test-handler >> - gating-core >> - gcp-secrets-manager-credentials-provider >> - gcr-scanner >> - gearman-plugin >> - gerrit-code-review >> - gerrit-trigger >> - gerrit-verify-status-reporter >> - ghprb >> - git-bisect >> - git-changelog >> - git-client >> - gitee >> - github >> - github-autostatus >> - github-oauth >> - github-pullrequest >> - gitlab-oauth >> - gitlab-plugin >> - gogs-webhook >> - google-admin-sdk >> - google-analytics-usage-reporter >> - google-cloud-backup >> - google-cloud-health-check >> - google-cloudbuild >> - google-compute-engine >> - google-container-registry-auth >> - google-deployment-manager >> - google-kubernetes-engine >> - google-oauth-plugin >> - google-source-plugin >> - google-storage-plugin >> - gradle >> - gravatar >> - headspin >> - hipchat >> - http_request >> - hubot-steps >> - hudson-wsclean-plugin >> - ibm-cloud-devops >> - in-toto >> - inedo-buildmaster >> - inedo-proget >> - influxdb-query >> - instana >> - ios-device-connector >> - ircbot >> - jacoco >> - jclouds-jenkins >> - jenkins-cloudfoundry-uaa >> - jgiven >> - jira >> - jira-steps >> - jira-trigger >> - JiraTestResultReporter >> - jms-messaging >> - job-node-stalker >> - jobgenerator >> - jslint >> - junit >> - kubernetes >> - kubernetes-cd >> - label-linked-jobs >> - lambdatest-automation >> - loadimpact-plugin >> - logstash >> - mabl-integration >> - machine-learning >> - marathon >> - master-provisioning-core >> - master-provisioning-kubernetes >> - maven-dependency-update-trigger >> - maven-invoker-plugin >> - maven-release-cascade >> - mesos >> - minio >> - minio-storage >> - miniorange-saml-sp >> - nectar-vmware >> - neoload-jenkins-plugin >> - nodelabelparameter >> - nodepool-agents >> - octoperf >> - ontrack >> - openedge >> - openshift-deployer >> - openshift-login >> - openstack-cloud >> - openstack-heat >> - opentelemetry >> - operations-center-analytics >> - operations-center-analytics-feeder >> - operations-center-analytics-reporter >> - operations-center-context >> - operations-center-monitoring >> - operations-center-server >> - operations-center-sso >> - oracle-cloud-infrastructure-compute >> - package-parameter >> - parameterized-trigger >> - perfecto >> - performance >> - periodicbackup >> - pipeline-aws >> - pipeline-cloudwatch-logs >> - pipeline-huaweicloud-plugin >> - pipeline-model-api >> - pipeline-model-definition >> - project-inheritance >> - radargun-reporting >> - rally-plugin >> - rapid7-insightvm-container-assessment >> - release-helper >> - reliza-integration >> - relution-publisher >> - repository >> - repository-connector >> - requests >> - rocketchatnotifier >> - role-strategy >> - rundeck >> - sahagin >> - saml >> - sauce-ondemand >> - scm-api >> - scm-httpclient >> - scm-manager >> - scm-sqs >> - scm-sync-configuration >> - screenrecorder >> - sectioned-view >> - seed >> - selenium >> - selenium-builder >> - service-fabric >> - service-now >> - servicenow-cicd >> - sitemonitor >> - slave-proxy >> - smilehubnotifier >> - sms >> - sonar >> - sonar-gerrit >> - split-admin >> - splunk-devops >> - splunk-devops-extend >> - spoonscript >> - spring-config >> - spring-initalzr >> - srcclr-installer >> - ssh-slaves >> - stackrox-container-image-scanner >> - sysdig-secure >> - telegram-notifications >> - telerik-appbuilder-plugin >> - testInProgress >> - testsigma >> - tics >> - timestamper >> - tuleap-api >> - tuleap-git-branch-source >> - uipath-automation-package >> - unleash >> - usemango-runner >> - venafi-vcert >> - violation-comments-to-stash >> - vmware-vrealize-automation-plugin >> - vrealize-automation-8 >> - vsphere-cloud >> - whitesource >> - wikitext >> - workflow-api >> - workflow-basic-steps >> - workflow-cps >> - workflow-support >> - xframium >> - xlrelease-plugin >> - xvnc >> - yet-another-docker-plugin >> - zanata >> - zephyr-for-jira-test-management >> - zos-connector >> >> >> I am wondering how best we should co-ordinate this work? CloudBees has >> already provided some of the plugins above to entirely remove Guava (rather >> than just make it forward and backward compatible). Some of the plugins on >> the list are also up-for adoption with no active maintainer. (similar to >> the Digester work I suggest that if thiese are not popular plugins they >> maybe have a PR and that is as far as it goes). >> >> Ontop of this as updating all the plugins could take a while I have >> another JEP that I need to file and CloudBees is investigating to isolate >> core/plugin libraries. If we had that it would potentially enable us to >> have a detached jenkins-2.xxx-compat plugin that bundled the old Guava and >> bump & isolate guava in core before all plugins had been updated (Ideally >> we would like to remove the Guava library however it is required by Guice) >> >> Regards >> >> /James >> >> On Friday, May 7, 2021 at 10:04:52 AM UTC+1 olive...@gmail.com wrote: >> >>> blueocean is WIP https://github.com/jenkinsci/blueocean-plugin/pull/2163 >>> (please >>> don't create separate PR) >>> >>> On Fri, 7 May 2021 at 12:40, Basil Crow <m...@basilcrow.com> wrote: >>> >>>> I started looking into which plugins use classes or methods from Guava >>>> 11 that have been removed in Guava 30. There is plenty of low-hanging >>>> fruit if anyone is interested in contributing by rewriting these >>>> usages. The list below is far from exhaustive, but it's a start. If >>>> you maintain one of these plugins, consider taking some proactive >>>> steps to migrate away from these APIs. >>>> >>>> com/google/common/base/Objects#firstNonNull >>>> - blueocean-pipeline-api-impl >>>> - blueocean-pipeline-scm-api >>>> - ec2-fleet >>>> - gearman-plugin >>>> - github >>>> - jclouds-jenkins >>>> - jira >>>> >>>> com/google/common/base/Objects#toStringHelper >>>> - blueocean-rest-impl >>>> - build-monitor-plugin >>>> - cloudfoundry-bosh-cli >>>> - docker-plugin >>>> - extreme-feedback >>>> - google-source-plugin >>>> - gravatar >>>> - repository >>>> - splunk-devops-extend >>>> >>>> com/google/common/base/Stopwatch#elapsedMillis >>>> - build-monitor-plugin >>>> >>>> com/google/common/base/Stopwatch#elapsedTime >>>> - relution-publisher >>>> - vsphere-cloud >>>> >>>> com/google/common/collect/Ranges >>>> - audit-trail >>>> - elastest >>>> - http_request >>>> - logstash >>>> - scm-httpclient >>>> >>>> com/google/common/io/Files#newOutputStreamSupplier >>>> - repository-connector >>>> >>>> com/google/common/net/InternetDomainName#name >>>> - scm-api >>>> >>>> com/google/common/util/concurrent/MoreExecutors#sameThreadExecutor >>>> - workflow-basic-steps >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Jenkins Developers" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to jenkinsci-de...@googlegroups.com. >>>> To view this discussion on the web visit >>>> https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjo5UfMB70nRvn4oG-KZ1GAy8MaAxBZPsEP8V3zJyOyZsg%40mail.gmail.com >>>> . >>>> >>> >>> >>> -- >>> Olivier Lamy >>> http://twitter.com/olamy | http://linkedin.com/in/olamy >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "Jenkins Developers" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to jenkinsci-dev+unsubscr...@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jenkinsci-dev/44efda9d-e987-4e7e-9be4-ad43e64bfb71n%40googlegroups.com >> <https://groups.google.com/d/msgid/jenkinsci-dev/44efda9d-e987-4e7e-9be4-ad43e64bfb71n%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3Bic0j2kgwBsZK6nRsDsHQURSXaQi1sjNpC8h1GCEy%2Bu1qw%40mail.gmail.com.
