Adopt docker-swarm plugin

57 views
Skip to first unread message

Michał Smaga

unread,
Apr 3, 2026, 3:47:47 PMApr 3
to jenkin...@googlegroups.com
  Hi,

  I would like to adopt the docker-swarm plugin:

  Plugin link: https://github.com/jenkinsci/docker-swarm-plugin
  Status: Abandoned (last release v1.11, over 5 years ago)
  Pull requests: https://github.com/jenkinsci/docker-swarm-plugin/pull/138
  GitHub Username: mbSmaga
  Jenkins Infrastructure ID: mbSmaga
  Repository Permission Updater PR: https://github.com/jenkins-infra/repository-permissions-updater/pull/5005

  The plugin has an unresolved stored XSS vulnerability (SECURITY-2811 / CVE-2023-40350)
  with no fix released. I have a fix ready along with POM modernization (Java 11+,
  Jenkins 2.462.3) and a Docker API 1.44 compatibility fix.

  My plan is to:
  - Fix the SECURITY-2811 vulnerability and cut a release
  - Triage the 54 open issues and 9 pending PRs
  - Bring the plugin up to current Jenkins standards


  Best regards,
  Michal Smaga

Kris Stern

unread,
Apr 3, 2026, 4:00:57 PMApr 3
to jenkin...@googlegroups.com
+1 from me, especially in view of the security fixes

From: jenkin...@googlegroups.com <jenkin...@googlegroups.com> on behalf of Michał Smaga <mb.s...@gmail.com>
Sent: 04 April 2026 03:47
To: jenkin...@googlegroups.com <jenkin...@googlegroups.com>
Subject: Adopt docker-swarm plugin
 
--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/jenkinsci-dev/CABk5f8YzZ%2BX0cX0CbNLc2YjF3__5x3kGhOEQm%2BvrUUSq97od0w%40mail.gmail.com.

Jesse Glick

unread,
Apr 6, 2026, 11:47:57 AMApr 6
to jenkin...@googlegroups.com
On Fri, Apr 3, 2026 at 3:48 PM Michał Smaga <mb.s...@gmail.com> wrote:
  I would like to adopt the docker-swarm plugin:

  Plugin link: https://github.com/jenkinsci/docker-swarm-plugin
  Status: Abandoned (last release v1.11, over 5 years ago)


CONFIDENTIALITY NOTICE: This email and any attachments contain confidential and proprietary information of CloudBees intended only for the named recipient(s). Unauthorized use or distribution is prohibited. If you received this in error, please notify the sender and delete this email.

Michał Smaga

unread,
Apr 14, 2026, 4:53:38 AM (11 days ago) Apr 14
to Jenkins Developers
Thanks for pointing it out. I'm currently testing swarm-agents-cloud-plugin. I'll let you know if my adopt requests is still valid. 
Reply all
Reply to author
Forward
0 new messages