Update Jenkins core and plugins: 2022Q2 edition

• Last time: #17847 (closed)

Preparation

• Update the list of actively used plugins
  • Add build-symlink
• Go through the changelog, paying attention to changes on how agents connect to controller, config changes that may need update, important changes in plugins, etc.
  • Current version: 2.332.1
  • Available version: 2.346.1

Deployment

• Take note of currently running builds before starting the upgrades
• Deploy Jenkins upgrade to latest version available
• Use the Groovy and Python3 scripts to generate a list of up-to-date plugins
  • See if upgrading jjb to the version in sid solves the problem with latest version of postbuildscript: #17847 (comment 186099), puppet-tails@1d89c7c7 → No: tails#19051 (moved)
• Deploy plugins upgrades
• Restart all agents.
• Manually run the Update jobs script (may be needed so XML is valid with current Jenkins):

  sudo -u jenkins /usr/local/sbin/deploy_jenkins_jobs update

Wrap up

• Go through warnings in Jenkins interface.
• Manually remove uneeded plugins from /var/lib/jenkins/plugins.
  • bootstrap4-api
  • jnr-posix-api
  • popper-api
• Restart builds that were interrupted by Jenkins restart.
• Schedule next update. → #17947 (closed)

Leftover Warnings

• global-build-stats plugin 244.v27c8a_2e50a_34 Stored XSS vulnerability: There's no newer version for this plugin for now and the previous one is from 5y ago.
• Available upgrade for postfbuildscript: see tails#19051 (moved)