4.32

💥 Compatibility warning

The Enforcer update in #456 triggers new errors in many plugins involving provided scope. If a Dependabot update produces a build failure mentioning RequireUpperBoundDeps, first update the plugin BOM to 1090.v0a_33df40457a_ or later (which necessitates updating the minimum Jenkins version to 2.289.1 or later), then rebase the Dependabot update against the result with @dependabot rebase. If you cannot update the plugin BOM to 1090.v0a_33df40457a_ or later, then exclude the problematic dependency trail to satisfy Enforcer.

You will also need to switch annotations from javax.annotation.* to edu.umd.cs.findbugs.annotations.* equivalents as in jenkinsci/jenkins#4604.

🚨 Removed

• Remove JSR 305 annotations (#467) @basil

🚀 New features and improvements

• Get annotation versions from core BOM (#470) @basil
• Ban vulnerable versions of Apache Log4j 2 (#465) @basil

🐛 Bug fixes

• Work around issues on 2.222.x, 2.235.x, and 2.289.x (#477) @basil
• Exclude javax.servlet:servlet-api (#469) @basil

📦 Dependency updates

• Bump Extra Enforcer rules from 1.3 to 1.5.1 (#471) @Vlatombe
• Bump Jenkins test harness from 1645.vf98fc478f846 to 1674.v3b8b1441e939 (#476, #464) @basil
• Bump Maven HPI plugin from 3.20 to 3.22 (#475, #460) @dependabot
• Bump Mockito from 4.0.0 to 4.2.0 (#474, #459) @dependabot
• Bump Access modifier from 1.25 to 1.27 (#473) @basil
• Bump SpotBugs annotations from 4.4.2 to 4.5.1 (#466, #454) @dependabot
• Bump Mock Repository Manager Maven plugin from 1.2.0 to 1.3.0 (#463) @dependabot
• Bump GMavenPlus plugin from 1.13.0 to 1.13.1 (#461) @dependabot
• Bump Maven Enforcer plugin from 3.0.0-M3 to 3.0.0 (#456) @basil
• Bump Jenkins test annotations from 1.3 to 1.4 (#455) @dependabot

📝 Documentation updates

• Update versions in README (#472) @Vlatombe

👻 Maintenance

• Consistent indentation (#458) @basil

4.31

📦 Dependency updates

• Bump maven-hpi-plugin from 3.19 to 3.20 (#452) @dependabot
• Bump mockito.version from 3.12.4 to 4.0.0 (#448) @dependabot

👻 Maintenance

• Do not reuse surefire (failsafe) forks for test stability (#453) @jtnord

4.30

📦 Dependency updates

• Bump jenkins-test-harness from 1589.vc23fca066d5c to 1645.vf98fc478f846 (#451) @dependabot
• Bump spotbugs-annotations from 4.4.1 to 4.4.2 (#450) @dependabot

4.29

🚀 New features and improvements

• Set automatically -release flag to java.level when running JDK9+ (#449) @Vlatombe

📦 Dependency updates

• Bump maven-hpi-plugin from 3.18 to 3.19 (#447) @dependabot

4.28

🐛 Bug fixes

• Revert #443 (argLine modification) (#446) @jglick

📦 Dependency updates

• Bump access-modifier-checker.version from 1.24 to 1.25 (#444) @dependabot

4.27

Known issues

JaCoCo integration breaks (discussion)

🚀 New features and improvements

• Avoid losing the focus because ForkedBooter on MacOS when running tests (#443) @MRamonLeon

4.26

⚠️ If your plugin was using Powermock in unit tests this update may be incompatible. See #442 (comment) for your options. ⚠️

---

🚨 Removed

• Remove powermock (#442) @timja

🚀 New features and improvements

• Add mockito-inline (#441) @timja

📦 Dependency updates

• Bump maven-license-plugin from 1.9 to 1.10 (#440) @dependabot
• Bump gmavenplus-plugin from 1.12.1 to 1.13.0 (#439) @dependabot
• Bump maven-war-plugin from 3.3.1 to 3.3.2 (#435) @dependabot
• Bump maven-hpi-plugin from 3.17 to 3.18 (#436) @dependabot
• Bump spotbugs-annotations from 4.4.0 to 4.4.1 (#437) @dependabot
• Bump maven-javadoc-plugin from 3.3.0 to 3.3.1 (#438) @dependabot

4.25

🚀 New features and improvements

• Move node/npm download root to properties to allow easy override (#434) @Vlatombe

📦 Dependency updates

• Bump maven-war-plugin from 3.3.1 to 3.3.2 (#435) @dependabot
• Bump maven-hpi-plugin from 3.17 to 3.18 (#436) @dependabot
• Bump spotbugs-annotations from 4.4.0 to 4.4.1 (#437) @dependabot
• Bump maven-javadoc-plugin from 3.3.0 to 3.3.1 (#438) @dependabot
• Bump mockito-core from 3.12.1 to 3.12.4 (#433) @dependabot
• Bump mockito-core from 3.11.2 to 3.12.1 (#431) @dependabot
• Bump spotbugs-annotations from 4.3.0 to 4.4.0 (#430) @dependabot

👻 Maintenance

• Update dependabot.yml (#432) @jtnord

4.24

🐛 Bug fixes

• Bogus errors about @Restricted(NoExternalUse.class) as in localizer-maven-plugin (#428) @jglick

4.23

🐛 Bug fixes

• JENKINS-66247 - Pick up more compatible access-modifier-checker (#427) @jglick