Jenkins Blue Ocean requires perforce.hpi that doesn't exist?

[Ryan Hendrickson]

Hi all,

   Does the perforce hpi no longer exist?  blueocean -> blueocean-jira -> jira -> perforce, however, when I download the hpi's for an offline install, the perforce hpi doesn't seem to exist.

https://updates.jenkins-ci.org/latest/perforce.hpi

Thanks,

Ryan

[Keith Zantow]

According to https://plugins.jenkins.io/jira it appears that perforce is optional, so you shouldn't need to have it installed.

--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAK7mpPdwqgGkCy4Um-P-QTSfVZhY58CW23h5cP1r9tFFMkmbzw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--

Keith Zantow
Senior Software Engineer
CloudBees, Inc.

E: kza...@cloudbees.com

[Ryan Hendrickson]

Hrm, I didn't see that.  Looks like that page is missing too: https://plugins.jenkins.io/perforce

Is it possible to update the Jira plugin to simply not include it in the dependencies?

Ryan

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAJTHQaGYwZWHKG2aBGPt%3Dtgo95dh64XaLw%2By6bsk1jf2zv_iMw%40mail.gmail.com.

[Devin Nusbaum]

Perforce was depublished because of a security advisory: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536, so the download links and the associated webpage on the plugins site have been removed.

Is it possible to update the Jira plugin to simply not include it in the dependencies?

Yes, it would probably make sense to update the Jira plugin to remove the perforce dependency and the code using it since I don’t think there are any plans to republish perforce.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAK7mpPeQfHU1QXvD75ZsX864EsTZzF83ea4KoAu6kbjtdHNZmQ%40mail.gmail.com.

[Ryan Hendrickson]

How does that work?  It is like a Pull Request I could submit?

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/B7626C29-B0ED-4636-B0D9-7046AF7E5B20%40cloudbees.com.

[Jesse Glick]

On Mon, Aug 20, 2018 at 2:20 PM Ryan Hendrickson
<ryan.andrew...@gmail.com> wrote:
> It is like a Pull Request I could submit?

Sure, file a PR deleting the `<dependency>` and all code which
requires it, and link to the advisory for context.

[Olivier Lamy]

Hi

dependency removed https://issues.jenkins-ci.org/browse/JENKINS-53150

maybe 1 or 2 days and will push a release.

--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CANfRfr0GMmuMJsYKjkTbLLHYcK0PcF6Bnbz-dj5Nc94t3OZ%3Dvg%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

--

Olivier Lamy
http://twitter.com/olamy | http://linkedin.com/in/olamy