The Jenkins governance board meets today at 6:00 PM UTC on Zoom. The Zoom URL is https://zoom.us/j/91564716663?pwd=R3A2RDFGcU1wTVdoVTErYm1jNzVWdz09
Current meeting agenda is: Agenda: - News - Releases - Jenkins 2.401.3 released Wednesday July 26, 2023 - Security release as announced in Jenkins advisories mailing list <https://groups.google.com/g/jenkinsci-advisories/c/2GiSsACaT28/m/BCIjzsneBQAJ>, includes 2.416 - Merges are paused to the master branch of Jenkins core until after the release - Jenkins 2.414 is the next LTS baseline - Jenkins 2.414.1 release candidate Aug 9, 2023 - Jenkins 2.414.1 release Aug 23, 2023 - Action Items - Mark Waite archive the governance meeting notes to a GitHub repository, use the Google doc as the working document, then publish final notes (done) - Mark archive submitted to the governance meeting archives repository <https://github.com/jenkins-infra/governance-meetings-archives/> in a merged pull request <https://github.com/jenkins-infra/governance-meetings-archives/pull/10> - NEW Alexander Brandes <mc.cach...@gmail.com>: Thoughts about using HackMD (https://hackmd.io/team/jenkins-governance (https://hackmd.io/6mgEkr1rS7Ca4j4a5YxZfA)) as a living document, like the infra team does? Then we could push meeting minutes directly to GitHub and retire the google doc totally. - Mark Waite retrospective on signing certificate renewal process <https://docs.google.com/document/d/1BB2TueNTLhK3TcJ5senSSSMdzy9D95DxPXuWNzL3k2s/edit#> and its improvements - Code signing certificate update for MSI and WAR files - PGP signing key update for RPM and DEB files - Debian key packaging improvements (some other projects use that technique now) - Notification and process improvements - Reimbursement improvements - Details being gathered in the retrospective document <https://docs.google.com/document/d/1BB2TueNTLhK3TcJ5senSSSMdzy9D95DxPXuWNzL3k2s/edit#> - Mark Waite submit jenkins.io pull request to combine subprojects and SIGs into a single concept - “working groups” - More pull requests needed - Jenkins board and officer elections in November 2023 - Proposal: Mark Waite and Alexander Brandes run the 2023 elections using same process as last year - Community activity - Artifactory bandwidth reduction project - JFrog hosts https://repo.jenkins-ci.org and covers all costs for the Jenkins project - JFrog is happy to continue hosting and sponsoring https://repo.jenkins-ci.org - Bandwidth use has been excessive due to abuse and misuse of its services - Duplicate downloads of released artifacts (jenkins.war, some tool installers) - 20 TB per month saved by blocking IP address of one abuser (March 2023) - JFrog has asked us to password protect our mirrors for the next reduction in bandwidth - Mark Waite’s proposal is described in detail in the help desk ticket <https://github.com/jenkins-infra/helpdesk/issues/3599#issuecomment-1640551729> - Action: Mark scheduling a discussion session this week with Jenkins infra, Jenkins security, and others - Damien Duportal, Daniel Beck, James Nord, Stephane Merle, Herve LeMeur - Other are welcome to attend - Prototype.js removal blog post <https://www.jenkins.io/blog/2023/05/12/removing-prototype-from-jenkins/> guides new contributors - Prototype.js removal epic <https://issues.jenkins.io/browse/JENKINS-70906> making progress - Plugin progress visible in the tracking sheet <https://docs.google.com/spreadsheets/d/1dpaKALZaK0_HIGy6ony3wnegr1frTg3u1lngG4KdoC8/edit?usp=sharing> - Concern for company maintained plugins to services we cannot test ourselves - Artifactory - maintained by JFrog (Over 22k installed) - Fortify - maintained by MicroFocus (Over 4k installed) - Xray test management for JIRA - maintained by David Duarte (Over 2k installed) - Synopsys Coverity - maintained by Synopsys (Over 1k installed) - qTest - maintained by Tricentis (Over 1k installed) - HTMLUnit 3 upgrades proceeding through 250+ plugin pull requests <https://github.com/search?q=org%3Ajenkinsci+Upgrade+HtmlUnit+from+2.x+to+3.x&type=pullrequests> - Completed for test harness <https://github.com/jenkinsci/jenkins-test-harness/pull/589>, core 2.409 <https://github.com/jenkinsci/jenkins/pull/8050>, tools, plugin pom 4.66 <https://github.com/jenkinsci/jenkins-test-harness/pull/589>, and plugin bom 2163 <https://github.com/jenkinsci/bom/releases/tag/2163.v2d916d90c305> - See the tracking sheet <https://docs.google.com/spreadsheets/d/1ih_gVd9uhxLw4BZ6IeJGrYsvu-DvIF0xovu4wZbaXy8/edit#gid=0> for latest status - Thanks to Tim Jacomb and Basil Crow, see Tim’s replacement script <https://github.com/timja/htmlunit-2.x-to-3.x/blob/main/replace.sh> - 4 Google Summer of Code projects <https://www.jenkins.io/blog/2023/05/04/gsoc2023-projects-announcement/> midterm evaluations complete -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/fca2fdc6-1053-4788-858f-3a179d097304n%40googlegroups.com.