March 18, 2024 Governance Board Agenda

[Mark Waite]

The Jenkins board meeting starts at 7:00 PM UTC (about 6 hours from now).  Zoom  link is https://zoom.us/j/91564716663?pwd=R3A2RDFGcU1wTVdoVTErYm1jNzVWdz09 

Here is the draft agenda: 

News

• Ampere Computing loaner AMR64 server is running Jenkins tasks
• Jenkins has been accepted to Google Summer of Code 2024, see Blog post from Alyssa Tong
  • Proposols to be sent by end of March
• Jenkins award voting is in progress. These awards recognize contributions from individuals in the community and the progress made in the name of Jenkins. Nominated candidates are:
  • Most Valuable Jenkins Advocate:
    • Alexander Brandes
    • Bruno Verachten
    • Darin Pope
    • Kris Stern
  • Most Valuable Jenkins Contributor:
    • Basil Crow
    • Daniel Beck
    • Kris Stern
    • Stefan Spieker
    • Tim Jacomb
    • Ullrich Hafner
  • Jenkins Security MVP:
    • Alvaro Muñoz
    • Yaniv Nizry
  • Voting is possible until March 22, 2024

Action Items

• Basil create the attribution entries for the downloads page
  • Jenkins sponsors have changed
  • Draft PR is almost ready for review at: jenkins-infra/jenkins.io#6882
• Kevin Martens retire the Chinese Jenkins site
  • Mark needs to do more Kubernetes setup, then Kevin and Mark will meet with Damien
  • More work after Kevin returns from holiday

Community activity

• GSoC preparation: A lot of traffic in the community forums, chat rooms, and GitHub repositories
• Contributer Spotlight this week: Bruno Verachten

Governance Topics

• Azure expense status
  • February expenses were $4200 USD - nicely under $5000 budget
    • Special thanks to Damien, Herve, and Stephane for cost reductions
• AWS credits donation
  • Credits have been received, not yet applying credits to Jenkins tasks
• Delphix plugin uses a proprietary component
  • Delphix maintainers have proposed an idea for the fix
  • Thanks to @daniel-beck for finding the issue and working with Delphix plugin maintainers
• Java 11 end of life and Spring end of public support
  • Last public build of Spring security framework 5.8.x is August 2024
    • Spring security 6.x requires Jetty 11 with Jakarta EE 9 (jakartaee.servlet), not Jetty 10 with Jakarta EE 8 (javax.servlet)
  • Last public build of Spring framework 5.3.x is August 2024
    • Spring framework 6.1 and later require Java 17
  • Alternatives:
    • Accept that if there is a security vulnerability reported in Spring security 5.8.x between August 2024 and end Oct 2024, we may need to fork Spring Security and fix it ourselves