Migration to a fresh plugins

[avoidik]

This topic for everyone who is afraid of upgrade plugins button. Hope this will save someones time

1. Changes in DSL for Groovy scripts

• workflowJob is replaced by pipelineJob
• relativeTargetDir is replaced by relativeTargetDirectory and have to be enclosed in extensions block

extensions {
	relativeTargetDirectory('platform-management')
}

• scriptText is replaced by script and have to be enclosed in groovyScript block (with additional sandbox option)

systemGroovyChoiceListProvider {
    groovyScript {
        script("")
        sandbox(false)
    }
}

2. Changes in scripts to approve
   Signatures already approved:

field java.util.ArrayList size
method com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy addRole java.lang.String com.michelin.cio.hudson.plugins.rolestrategy.Role
method com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy assignRole java.lang.String com.michelin.cio.hudson.plugins.rolestrategy.Role java.lang.String
method com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy getRoleMap java.lang.String
method com.michelin.cio.hudson.plugins.rolestrategy.RoleMap getRole java.lang.String
method groovy.lang.GString plus java.lang.String
method groovy.lang.Script println java.lang.Object
method hudson.model.Run getEnvironment hudson.model.TaskListener
method hudson.model.Saveable save
method java.lang.Class getDeclaredMethod java.lang.String java.lang.Class[]
method java.lang.reflect.AccessibleObject setAccessible boolean
method jenkins.model.Jenkins getAuthorizationStrategy
new com.michelin.cio.hudson.plugins.rolestrategy.Role java.lang.String java.lang.String java.util.Set
staticField com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy PROJECT
staticMethod hudson.model.Hudson getInstance
staticMethod hudson.security.Permission fromId java.lang.String
staticMethod jenkins.model.Jenkins getInstance

Signatures already approved which may have introduced a security vulnerability (recommend clearing):

method java.lang.Class getDeclaredMethod java.lang.String java.lang.Class[]
staticMethod hudson.model.Hudson getInstance
staticMethod jenkins.model.Jenkins getInstance

Feel free to add information here regarding upgrade to a fresh plugins versions

[avoidik]

Next time I'll try to upgrade Jenkins version itself. Main issues here is that Scriptler isn't supported officially, but I've created workaround for this

biouno/uno-choice-plugin#84

[Spathapati3]

Signatures already approved which may have introduced a security vulnerability (recommend clearing):

method java.lang.Class getDeclaredMethod java.lang.String java.lang.Class[]
staticMethod hudson.model.Hudson getInstance
staticMethod jenkins.model.Jenkins getInstance

Are these okay will it cause any vulnerabilty

[avoidik]

Those are all getters, not setters. In case of a security incident they won't change any inner state, however there's a non-zero chance this can be used to extract data. So it's a trade off between absolute security and usable product.