Yeah, Plugins can be a pain in the neck.
You could build a jenkins server as a test server as a test rig which is what I do as a docker container with all your current software and test the new plugins. That will at least ensure that after your testing you will know if your pipeline still work. -- Regards, Vince Bailey Live long and prosper !!! > On 26 Aug 2020, at 16:10, Ullrich Hafner <ullrich.haf...@gmail.com> wrote: > > You cannot update this specific version. There are still some plugins (and > maybe some old core scripts as well) that use jQuery 1, so we cannot remove > that dependency. If a new plugin wants to use jQuery then there is an > additional plugin available: https://github.com/jenkinsci/jquery3-api-plugin > <https://github.com/jenkinsci/jquery3-api-plugin> > >> Am 26.08.2020 um 16:38 schrieb eric....@gmail.com <http://gmail.com/> >> <eric.fet...@gmail.com <mailto:eric.fet...@gmail.com>>: >> >> Hi All, >> >> Just got gigged by our security team for a vulnerability in Jenkins with the >> version of JQuery installed. How do I go about updating the version of >> JQuery Jenkins runs? Here's the specifics of the vulnerability: >> >> Plugin Output: >> URL : http://myMachine:8081/js/jquery-1.11.1.min.js >> <http://mymachine:8081/js/jquery-1.11.1.min.js> >> Installed version : 1.11.1 >> Fixed version : 3.5.0 >> >> I'm running version 2.235.5 of Jenkins. >> >> Thanks, >> Eric >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Jenkins Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to jenkinsci-users+unsubscr...@googlegroups.com >> <mailto:jenkinsci-users+unsubscr...@googlegroups.com>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jenkinsci-users/13c921b1-02f4-4f00-a474-266fe766ced0n%40googlegroups.com >> >> <https://groups.google.com/d/msgid/jenkinsci-users/13c921b1-02f4-4f00-a474-266fe766ced0n%40googlegroups.com?utm_medium=email&utm_source=footer>. > > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jenkinsci-users+unsubscr...@googlegroups.com > <mailto:jenkinsci-users+unsubscr...@googlegroups.com>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/C41FF017-77FB-4726-93B4-264011284A0E%40gmail.com > > <https://groups.google.com/d/msgid/jenkinsci-users/C41FF017-77FB-4726-93B4-264011284A0E%40gmail.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/2254C83D-ECC6-4B4C-BACB-E81AF97F98F8%40dns-direct.com.
