Releases: jenkinsci/script-security-plugin
Releases · jenkinsci/script-security-plugin
1175.v4b_d517d6db_f0
🐛 Bug fixes
- JENKINS-63766 - Work around JDK-8231454 (#420) @basil
1172.v35f6a_0b_8207e
🔒 Security
- Fix SECURITY-2116
- Hardening: Do not automatically approve unmodified, unsandboxed scripts when administrators submit job configuration forms. For better compatibility, Pipeline: Groovy should be updated to version 2692.v76b_089ccd026, which requires Pipeline: Job to be simultaneously updated to version 1181.va_25d15548158.
1158.v7c1b_73a_69a_08
🚀 New features and improvements
- Whitelist net.sf.json.JSON isEmpty() (#402) @offa
- JENKINS-62708 - Add JCasC support for approved script hashes (#329) @MarkRx
🐛 Bug fixes
👻 Maintenance
- Switch to Temurin distribution (#400) @offa
- Make a comment more inclusive (#405) @MarkEWaite
📦 Dependency updates
- Bump actions/checkout from 2.4.0 to 3.0.2 (#412) @dependabot
1146.vdf547f19a_473
1145.vb_cf6cf6ed960
🐛 Bug fixes
- JENKINS-68070 - Adapt generic-whitelist to Java standard library changes in Java 15+ (#394) @dwnusbaum
1140.vf967fb_efa_55a_
🐛 Bug fixes
- Fix broken icon on modern Jenkins versions (#384) @NotMyFault
📦 Dependency updates
- JENKINS-65237 - Bump Groovy from 2.4.12 to 2.4.21 (#373) @basil
1138.v8e727069a_025
📦 Dependency updates
- Bump plugin from 4.31 to 4.33 (#381) @dependabot
🚦 Tests
- Do not use Guava's
NullOutputStream
(#387) @raul-arabaolaza - Enforce use of
Outer$Inner
syntax in whitelists (#383) @jglick
1131.v8b_b_5eda_c328e
🚀 New features and improvements
- JENKINS-66735 - : Whitelist some common signatures and additional signatures from
CauseOfInterruption
(#365) @haridsv
📦 Dependency updates
1125.v132f99385e1b_
🚀 New features and improvements
- JENKINS-66888 - Whitelist
java.time.temporal.ChronoUnit.*
(#368) @spike-rabbit
📦 Dependency updates
- Bump actions/checkout from 2.3.4 to 2.4.0 (#375) @dependabot
- Bump jenkins-infra/jenkins-maven-cd-action from 1.1.0 to 1.2.0 (#376) @dependabot
- Bump git-changelist-maven-extension from 1.2 to 1.3 (#379) @dependabot
- EOL JSR 305 (#380) @basil