Update Swarm plugins' remoting dependency

[ta...@appscode.com]

Hi,

It seems that today's security release upgrade remoting package to 3.4.1. Can you release a new version of Swarm plugin with the updated remoting dependency?

https://github.com/jenkinsci/swarm-plugin/blob/master/client/pom.xml#L58

Thanks,

-Tamal

[Jesse Glick]

On Wed, Feb 1, 2017 at 11:39 AM, <ta...@appscode.com> wrote:
> It seems that today's security release upgrade remoting package to 3.4.1.
> Can you release a new version of Swarm plugin with the updated remoting
> dependency?

It should not be necessary.

[ta...@appscode.com]

Thanks Jesse.  Now that I got you here, do you mind taking a look at https://issues.jenkins-ci.org/browse/JENKINS-40799 ?

[Jesse Glick]

On Wed, Feb 1, 2017 at 2:09 PM, <ta...@appscode.com> wrote:
> do you mind taking a look at
> https://issues.jenkins-ci.org/browse/JENKINS-40799 ?

Sorry, I am not a maintainer of this plugin.

[Daniel Beck]

> On 01.02.2017, at 20:09, ta...@appscode.com wrote:
>
> Now that I got you here

Uh…

https://github.com/jenkinsci/swarm-plugin/commits/master?author=jglick

Whatever your request is, Jesse is probably the wrong person to ask.

[ta...@appscode.com]

Ok. Basically 3.0 version for this plugin was cut in late Dec. But the jar files were not published. I have built my own jar files. It will be good to see jar files publishes by plugin maintainer.

[Owen Mehegan]

I would suggest you look at the recent commits and reach out to the person who did the last release, rather than just posting on this mailing list. See https://github.com/jenkinsci/swarm-plugin/commits/master

(Perhaps mindjiver should be listed as the maintainer on the wiki page?)

[ta...@appscode.com]

Thank for showing the proper way. All this Github/JIRA/Google groups gets little confusing for someone uninitiated like me. I have posted on the JIRA ticket.

[Oleg Nenashev]

I have an action item to update the Swarm plugin and Docker images for Jenkins agents, but right now it is not urgent since the fix on the master side is enough to resolve the security issue.

I've taken JENKINS-40799 in JIRA, will try to contact the maintainer

среда, 1 февраля 2017 г., 21:44:13 UTC+1 пользователь tamal написал:

[tamal]

Oleg, do you have any update on JENKINS-40799?

Thanks.

[Arnaud Héritier]

See my last comment in https://issues.jenkins-ci.org/browse/JENKINS-40799

https://groups.google.com/forum/#!topic/jenkinsci-dev/6SOJTW1YyWc

I contacted Peter, the plugin owner, to help him to fix the issue

--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/d8e57f4a-322e-4c05-b03b-dd2d91e61e00%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

-----

Arnaud Héritier

http://aheritier.net

Mail/GTalk: aheritier AT gmail DOT com

Twitter/Skype : aheritier