Timeboxed attempt to upgrade jenkins-job-builder to 6.4.2+

intrigeri
2026-04-02T08:18:15Z

Context

https://gitlab.torproject.org/tpo/tpa/team/-/issues/42534

Scope

Give the upgrade a quick timeboxed try, at a time that works for TPA (to upgrade/downgrade packages, temporarily disable automated APT upgrades if needed) and the Tails Team (update the jjb config), and see how far we can get within N hours of work; be ready to downgrade the package and to revert tails/jenkins-jobs to the previous version.

Timing

We should do this:

At some point in 2026, way ahead of the Forky upgrades.

At a time when it's OK to break Jenkins for a little while, such as:

Shortly after a release

When most of the Tails Team is on vacation (except intrigeri who's the best suited to do this work)

To Do

Decide what's the appropriate size of the timebox

Schedule the attempt in coordination with TPA

Ensure TPA temporarily upgrades jjb to Trixie

Attempt to port our jenkins-jobs config

If success:

Ensure TPA encodes in Puppet that we need jjb/trixie (as opposed to "whatever is in the Debian version we're running")

Report back on https://gitlab.torproject.org/tpo/tpa/team/-/issues/42534

Track the next round of upgrade in GitLab

If failure:

Revert the jenkins-jobs changes

Ensure TPA downgrades jjb to Bookworm

Report back to https://gitlab.torproject.org/tpo/tpa/team/-/issues/42534 and plan the next steps there