Jenkins 2.204.6 Error updating plugins

[Alex DeMarco]

We have not updated plugins in a while.   No matter what plugin I try to update I get the following error:

java.io.IOException: Download file :..../.jenkins/plugins/script-security.jpi.tmp does not match expected SHA-256, expected 'a long string of text;, actual 'a different long string of text'

Any suggestions or ideas on how to resole this issue?

Linux 7, Jenkin 2.204.6 java 1.8

thank you in advance

- Alex

[Mark Waite]

Based on the documentation at https://github.com/jenkins-infra/update-center2/blob/master/site/LAYOUT.md#tier-list , I checked the output of https://updates.jenkins.io/tiers.json and it shows that Jenkins 2.204.x is no longer served by the Jenkins Update Center.

The documentation at https://github.com/jenkins-infra/update-center2/blob/master/site/LAYOUT.md#regular-tiered-update-sites-lts-and-weekly says:

The Jenkins project publishes a limited, fixed number of tiered update sites to encourage users to regularly update Jenkins.

I believe that means Jenkins 2.204.6 plugin updates are no longer available from the Jenkins update center.  The Jenkins project encourages you to regularly update Jenkins, especially since there have been several security fixes in Jenkins core since Jenkins 2.204.6.  You'll need to upgrade your Jenkins controller if you want to continue updating plugins.

Mark Waite

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/f783133d-6e6b-4749-a99b-3c089978e5f8n%40googlegroups.com.

[Daniel Beck]

On Fri, Jul 2, 2021 at 1:42 AM Alex DeMarco <demarc...@gmail.com> wrote:

We have not updated plugins in a while.   No matter what plugin I try to update I get the following error:

java.io.IOException: Download file :..../.jenkins/plugins/script-security.jpi.tmp does not match expected SHA-256, expected 'a long string of text;, actual 'a different long string of text'

That usually happens when your network setup interferes and you get a proxy error page or something like that, instead of real file downloads.

[Daniel Beck]

On Fri, Jul 2, 2021 at 1:52 AM Mark Waite <mark.ea...@gmail.com> wrote:

I believe that means Jenkins 2.204.6 plugin updates are no longer available from the Jenkins update center.

That just means that if a plugin requires a newer core, we'll not advertise older plugin releases compatible with this older core. Downloads should still work, loading plugins would fail.