4.369.v13507586ef8c

🐛 Bug fixes

• JENKINS-69930 - NullPointerException from getUseDiskCache in SAML plugin (#280) @kuisathaverat
• JENKINS-69932 - Log in: This URL requires POST (#281) @kuisathaverat

4.367.v4f342c34459a

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: change to use XMLUtils to process IdP Metadata (#279) @kuisathaverat

📦 Dependency updates

• chore(deps): bump xmlsec from 3.0.0 to 3.0.1 (#267) @dependabot

4.365.v56110e68e1b_8

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: Stapler: Missing permission check (#278) @kuisathaverat

4.364.veddefb_8dc0ea

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: Stapler: Missing POST/RequirePOST annotation (#277) @kuisathaverat

4.363.v6cc620b_d37a_2

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin

🚀 New features and improvements

• JENKINS-61747 - Do not write the SP metadata with every login (#98) @kuisathaverat

🐛 Bug fixes

• fix: disable external entities resolution (#276) @kuisathaverat

4.361.v79b_c2d76d2b_b

🐛 Bug fixes

• JENKINS-69898 - saml plugin affected by CVE -2022-42003;42004 (#275) @kuisathaverat

📦 Dependency updates

• JENKINS-69898 - saml plugin affected by CVE -2022-42003;42004 (#275) @kuisathaverat
• chore(deps): bump bom-2.361.x from 1607.va_c1576527071 to 1643.v1cffef51df73 (#274) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.4 to 1.17.5 (#273) @dependabot
• chore(deps): bump plugin from 4.47 to 4.48 (#272) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.3 to 1.17.4 (#270) @dependabot

4.354.vdc8c005cda_34

🚀 New features and improvements

• feat: Tolerate missing SAML response Destination attribute (#268) @kuisathaverat

📝 Documentation updates

• docs: add Sign Out URL (#265) @kuisathaverat

4.352.vb_722786ea_79d

💥 Breaking changes

• break: remove deprecated fields (#262) @kuisathaverat
  If you cobfigured the following fields in the version 0.14< you have to update to the last version compatible 3.343.vb_63a_6c3df23c and save the Security configuration before update to 4.352.vb_722786ea_79d:
  • SamlAdvancedConfiguration.maximumSessionLifetime
  • SamlEncryptionData.keystorePassword
  • SamlEncryptionData.privateKeyPassword

🚀 New features and improvements

• Update pac4j to 5.2.0 (#257) @Riliane

📝 Documentation updates

• docs: troubleshooting for 'HTTP ERROR 403 No valid crumb was included in the request' errors (#263) @kuisathaverat
• docs: fix typos and grammar (#259) @kuisathaverat

👻 Maintenance

• feat: update the plugin to use Spring framework classes (#261) @kuisathaverat
• fix: code warnings (#260) @kuisathaverat
• docs: fix typos and grammar (#259) @kuisathaverat

✍ Other changes

• Fix LiveTest (#264) @Vlatombe
• Use optionalProperty from core (#212) @Vlatombe

📦 Dependency updates

• Bump bom-2.361.x from 1595.v8c71c13cc3a_9 to 1607.va_c1576527071 (#258) @dependabot

3.343.vb_63a_6c3df23c

💥 Breaking changes

• feat: Remove support for Java 8 (#234) @kuisathaverat

👻 Maintenance

• Clean up TODO (#252) @basil

📦 Dependency updates

• feat: Remove support for Java 8 (#234) @kuisathaverat
• Bump plugin from 4.45 to 4.47 (#255) @dependabot
• Bump bom-2.332.x from 1542.vc795072f7236 to 1556.vfc6a_f216e3c6 (#249) @dependabot
• Bump plugin from 4.44 to 4.45 (#250) @dependabot
• Bump bom-2.332.x from 1539.v6a_85813638f8 to 1542.vc795072f7236 (#248) @dependabot
• Bump plugin from 4.43.1 to 4.44 (#246) @dependabot
• Bump git-changelist-maven-extension from 1.3 to 1.4 (#238) @dependabot
• Bump bom-2.332.x from 1508.v4b_d09ff0e893 to 1539.v6a_85813638f8 (#247) @dependabot
• Use versions from BOM where possible (#245) @basil

2.333.vc81e525974a_c

🐛 Bug fixes

• Adapt to Jakarta Mail migration (#241) @basil

✍ Other changes

• chore: use jenkins infra maven cd reusable workflow (#235) @jetersen

📦 Dependency updates

32 changes

• Bump configuration-as-code from 1511.vb_f985b_894e40 to 1512.vb_79d418d5fc8 (#242) @dependabot
• Bump test-harness from 1511.vb_f985b_894e40 to 1512.vb_79d418d5fc8 (#243) @dependabot
• Bump configuration-as-code from 1466.v2d4119502006 to 1511.vb_f985b_894e40 (#236) @dependabot
• Bump test-harness from 1466.v2d4119502006 to 1511.vb_f985b_894e40 (#237) @dependabot
• Bump configuration-as-code from 1464.vd8507b_82e41a_ to 1466.v2d4119502006 (#231) @dependabot
• Bump test-harness from 1464.vd8507b_82e41a_ to 1466.v2d4119502006 (#230) @dependabot
• Bump bom-2.332.x from 1472.vb_65d893c9a_b_6 to 1478.v81d3dc4f9a_43 (#232) @dependabot
• Bump plugin from 4.42 to 4.43.1 (#233) @dependabot
• Bump bom-2.332.x from 1466.v85a_616ea_b_87c to 1472.vb_65d893c9a_b_6 (#229) @dependabot
• Bump bouncycastle-api from 2.25 to 2.26 (#213) @dependabot
• Bump plugin from 4.41 to 4.42 (#228) @dependabot
• Bump bom-2.303.x from 1461.vb_3c6de28f2b_a_ to 1466.v85a_616ea_b_87c (#227) @dependabot
• Bump testcontainers from 1.17.2 to 1.17.3 (#226) @dependabot
• Bump xmlsec from 2.3.0 to 3.0.0 (#214) @dependabot
• Bump bom-2.303.x from 1451.v15f1fdb_772a_f to 1461.vb_3c6de28f2b_a_ (#224) @dependabot
• Bump test-harness from 1429.v09b_044a_c93de to 1464.vd8507b_82e41a_ (#223) @dependabot
• Bump configuration-as-code from 1462.v069a_b_57ff5c8 to 1464.vd8507b_82e41a_ (#225) @dependabot
• Bump plugin from 4.40 to 4.41 (#221) @dependabot
• Bump configuration-as-code from 1429.v09b_044a_c93de to 1462.v069a_b_57ff5c8 (#220) @dependabot
• Bump test-harness from 1414.v878271fc496f to 1429.v09b_044a_c93de (#199) @dependabot
• Bump jenkins-infra/jenkins-maven-cd-action from 1.3.0 to 1.3.1 (#215) @dependabot
• Bump bom-2.303.x from 1438.v6a_2c29d73f82 to 1451.v15f1fdb_772a_f (#219) @dependabot
• Bump bom-2.303.x from 1409.v7659b_c072f18 to 1438.v6a_2c29d73f82 (#218) @dependabot
• Bump jenkins-infra/verify-ci-status-action from 1.2.0 to 1.2.1 (#217) @dependabot
• Bump jenkins-infra/interesting-category-action from 1.1.0 to 1.2.0 (#216) @dependabot
• Bump configuration-as-code from 1414.v878271fc496f to 1429.v09b_044a_c93de (#201) @dependabot
• Bump bom-2.303.x from 1210.vcd41f6657f03 to 1409.v7659b_c072f18 (#210) @dependabot
• Bump testcontainers from 1.16.3 to 1.17.2 (#209) @dependabot
• Bump jenkins-infra/interesting-category-action from 1.0.0 to 1.1.0 (#205) @dependabot
• Bump jenkins-infra/jenkins-maven-cd-action from 1.2.0 to 1.3.0 (#204) @dependabot
• Bump actions/setup-java from 2 to 3 (#195) @dependabot
• Bump plugin from 4.38 to 4.40 (#194) @dependabot