4.418.vdfa_7489a_b_a_2d

🐛 Bug fixes

• JENKINS-71322 - NPE on non existing SAML Attribute (#345) @kuisathaverat

✍ Other changes

• Add Java 17 to build/test matrix (#340) @basil
• EOL JSR 305 (#332) @basil

📦 Dependency updates

• chore(deps): bump plugin from 4.64 to 4.65 (#343) @dependabot
• chore(deps-dev): bump testcontainers from 1.18.1 to 1.18.2 (#344) @dependabot
• chore(deps): bump plugin from 4.63 to 4.64 (#342) @dependabot
• chore(deps): bump bom-2.361.x from 2081.v85885a_d2e5c5 to 2102.v854b_fec19c92 (#341) @dependabot
• chore(deps): bump plugin from 4.62 to 4.63 (#338) @dependabot
• chore(deps): bump bom-2.361.x from 2062.v154408a_24d20 to 2081.v85885a_d2e5c5 (#339) @dependabot
• chore(deps-dev): bump testcontainers from 1.18.0 to 1.18.1 (#337) @dependabot
• chore(deps): bump bom-2.361.x from 2025.v816d28f1e04f to 2062.v154408a_24d20 (#336) @dependabot
• chore(deps): bump plugin from 4.61 to 4.62 (#334) @dependabot
• chore(deps): bump bom-2.361.x from 2000.v4677a_6e0ffea to 2025.v816d28f1e04f (#333) @dependabot
• chore(deps): bump plugin from 4.60 to 4.61 (#330) @dependabot
• chore(deps): bump bom-2.361.x from 1981.v17df70e84a_a_1 to 2000.v4677a_6e0ffea (#329) @dependabot

4.403.v423b_3195a_9ec

📝 Documentation updates

• [docs] Update ADFS configuration (#316) @bmagistro

👻 Maintenance

• Stop bundling unnecessary libraries (#309) @basil

📦 Dependency updates

16 changes

• chore(deps): bump bom-2.361.x from 1766.v0b_f2a_f7d0b_1d to 1981.v17df70e84a_a_1 (#326) @dependabot
• chore(deps): bump plugin from 4.59 to 4.60 (#328) @dependabot
• chore(deps): bump plugin from 4.58 to 4.59 (#327) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.6 to 1.18.0 (#325) @dependabot
• chore(deps): bump plugin from 4.57 to 4.58 (#324) @dependabot
• chore(deps): bump plugin from 4.55 to 4.57 (#321) @dependabot
• chore(deps): bump xmlsec from 3.0.1 to 3.0.2 (#322) @dependabot
• chore(deps): bump plugin from 4.54 to 4.55 (#313) @dependabot
• chore(deps): bump git-changelist-maven-extension from 1.5 to 1.6 (#314) @dependabot
• chore(deps): bump jenkins-infra/jenkins-security-scan from 1 to 2 (#315) @dependabot
• chore(deps): bump git-changelist-maven-extension from 1.4 to 1.5 (#310) @dependabot
• chore(deps): bump plugin from 4.53 to 4.54 (#306) @dependabot
• chore(deps): bump bom-2.361.x from 1763.v092b_8980a_f5e to 1766.v0b_f2a_f7d0b_1d (#304) @dependabot
• chore(deps): bump bom-2.361.x from 1757.vf3c66da_b_7492 to 1763.v092b_8980a_f5e (#303) @dependabot
• chore(deps): bump bom-2.361.x from 1750.v0071fa_4c4a_e3 to 1757.vf3c66da_b_7492 (#302) @dependabot
• chore(deps): bump bom-2.361.x from 1742.vb_70478c1b_25f to 1750.v0071fa_4c4a_e3 (#301) @dependabot

4.385.v4dea_91565e9d

🚀 New features and improvements

• feat: support random generated relayState parameter (#299) @kuisathaverat

👻 Maintenance

• Remove unnecessary SpotBugs exclusion (#295) @basil

✍ Other changes

• Refresh plugin (#291) @basil
• chore(deps): bump bom-2.361.x from 1654.vcb_69d035fa_20 to 1670.v7f165fc7a_079 (#287) @dependabot

📦 Dependency updates

• chore(deps): bump actions/dependency-review-action from 2 to 3 (#290) @dependabot
• chore(deps): bump bom-2.361.x from 1723.vcb_9fee52c9fc to 1742.vb_70478c1b_25f (#298) @dependabot
• chore(deps): bump plugin from 4.51 to 4.53 (#300) @dependabot
• chore(deps): bump bom-2.361.x from 1706.vc166d5f429f8 to 1723.vcb_9fee52c9fc (#296) @dependabot
• chore(deps): bump plugin from 4.50 to 4.51 (#294) @dependabot
• chore(deps): bump bom-2.361.x from 1678.vc1feb_6a_3c0f1 to 1706.vc166d5f429f8 (#292) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.5 to 1.17.6 (#293) @dependabot
• chore(deps): bump bom-2.361.x from 1670.v7f165fc7a_079 to 1678.vc1feb_6a_3c0f1 (#288) @dependabot
• chore(deps): bump plugin from 4.48 to 4.49 (#286) @dependabot

4.372.v89f13e4c9e97

🐛 Bug fixes

• JENKINS-69958 - Properly overload the loadGroupByGroupname2 to fix er… (#283) @Dohbedoh
• fix: metadata endpoint should be public (#284) @viceice

📦 Dependency updates

• chore(deps): bump bom-2.361.x from 1643.v1cffef51df73 to 1654.vcb_69d035fa_20 (#282) @dependabot

4.369.v13507586ef8c

🐛 Bug fixes

• JENKINS-69930 - NullPointerException from getUseDiskCache in SAML plugin (#280) @kuisathaverat
• JENKINS-69932 - Log in: This URL requires POST (#281) @kuisathaverat

4.367.v4f342c34459a

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: change to use XMLUtils to process IdP Metadata (#279) @kuisathaverat

📦 Dependency updates

• chore(deps): bump xmlsec from 3.0.0 to 3.0.1 (#267) @dependabot

4.365.v56110e68e1b_8

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: Stapler: Missing permission check (#278) @kuisathaverat

4.364.veddefb_8dc0ea

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: Stapler: Missing POST/RequirePOST annotation (#277) @kuisathaverat

4.363.v6cc620b_d37a_2

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin

🚀 New features and improvements

• JENKINS-61747 - Do not write the SP metadata with every login (#98) @kuisathaverat

🐛 Bug fixes

• fix: disable external entities resolution (#276) @kuisathaverat

4.361.v79b_c2d76d2b_b

🐛 Bug fixes

• JENKINS-69898 - saml plugin affected by CVE -2022-42003;42004 (#275) @kuisathaverat

📦 Dependency updates

• JENKINS-69898 - saml plugin affected by CVE -2022-42003;42004 (#275) @kuisathaverat
• chore(deps): bump bom-2.361.x from 1607.va_c1576527071 to 1643.v1cffef51df73 (#274) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.4 to 1.17.5 (#273) @dependabot
• chore(deps): bump plugin from 4.47 to 4.48 (#272) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.3 to 1.17.4 (#270) @dependabot