1405.vb_cda_74a_f8974

🚀 New features and improvements

• JENKINS-74964 - Display error message when adding invalid certificate credentials (#580) @Priya-CB

👻 Maintenance

• Register OptionHandler through META-INF/services/annotations and Annotation Indexer rather than META-INF/services and Commons Discovery (#575) @basil

1393.v6017143c1763

🚀 New features and improvements

• Handle password with empty string for certificate auth (#581) @timja

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 5.1 to 5.2 (#568) @dependabot

1389.vd7a_b_f5fa_50a_2

🐛 Bug fixes

• Adding credentials should not require a check on CredentialsStore#isDomainsModifiable (#557) @Dohbedoh

👻 Maintenance

• Require Java 17 or newer; migrate to EE 9 (#566) @basil

1384.vf0a_2ed06f9c6

🚀 New features and improvements

• Update 'Add credentials' dropdown button (#551) @janfaracik

✍ Other changes

• Fix typo in name of internal class registering SecretBytesRedaction (#562) @daniel-beck

1381.v2c3a_12074da_b_

🔒 Security fixes

• Fix SECURITY-3373. This fix requires Jenkins 2.479 or newer, LTS 2.462.3 or newer, to be effective.

1380.va_435002fa_924

🚀 New features and improvements

• CSP compatibility improvements (#533) @zbynek

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 4.87 to 4.88 (#560) @dependabot

1371.1373.v4eb_fa_b_7161e9

🔒 Security fixes

• Fix SECURITY-3373. This fix requires Jenkins 2.479 or newer, LTS 2.462.3 or newer, to be effective. Backport of 1381.v2c3a_12074da_b_ on top of 1371.vfee6b_095f0a_3.

1378.v81ef4269d764

💥 Breaking changes

• In FIPS environment password must be at least 14 characters (#558) @olamy

🐛 Bug fixes

• In FIPS environment password must be at least 14 characters (#558) @olamy

✍ Other changes

• Remove hard-coded java-version in Security Scan (#555) @strangelookingnerd
• Enable Jenkins Security Scan (#538) @strangelookingnerd

📦 Dependency updates

• Bump org.jenkins-ci.plugins:bouncycastle-api from 2.30.1.78.1-246.ve1089fe22055 to 2.30.1.78.1-248.ve27176eb_46cb_ (#548) @dependabot
• Bump org.antlr:antlr4-maven-plugin from 4.13.1 to 4.13.2 (#554) @dependabot
• Bump io.jenkins.tools.bom:bom-2.426.x from 2961.v1f472390972e to 3208.vb_21177d4b_cd9 (#552) @dependabot
• Bump org.jenkins-ci.plugins:plugin from 4.85 to 4.87 (#556) @dependabot

1371.vfee6b_095f0a_3

🚀 New features and improvements

• JENKINS-73335 - add support for PEM encoded certificate (and key) (#543) @jtnord

1361.v56f5ca_35d21c

🚀 New features and improvements

• JENKINS-73334 - make plugin FIPS-140 compliant by blocking PKCS#12 certificates when in FIPS mode (#539) @jtnord

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 4.84 to 4.85 (#546) @dependabot