From 384a04a1ee4ad16e11400d32edf8d29e9d6b8fc8 Mon Sep 17 00:00:00 2001 From: "Vazquez,Brais (IT EDP) BI-ES-S" Date: Fri, 7 Aug 2026 15:38:20 +0200 Subject: [PATCH 1/3] test downgraded plugin version --- jenkins/master/plugins.ubi9.txt | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/jenkins/master/plugins.ubi9.txt b/jenkins/master/plugins.ubi9.txt index 96b30a65e..d5d300d9e 100644 --- a/jenkins/master/plugins.ubi9.txt +++ b/jenkins/master/plugins.ubi9.txt @@ -8,5 +8,4 @@ allure-jenkins-plugin:2.34.0 oidc-provider:89.v3dfb_6d89b_618 # plugins modified to fix incompatibilities -git-client:6.6.1 -git:5.10.1 +git-client:6.3.3 From bfb58f537abd54c1184b9d186c6c081831696fd7 Mon Sep 17 00:00:00 2001 From: "Vazquez,Brais (IT EDP) BI-ES-S" Date: Fri, 7 Aug 2026 15:56:46 +0200 Subject: [PATCH 2/3] fix plugins --- jenkins/master/plugins.ubi9.txt | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/jenkins/master/plugins.ubi9.txt b/jenkins/master/plugins.ubi9.txt index d5d300d9e..83c1d92fe 100644 --- a/jenkins/master/plugins.ubi9.txt +++ b/jenkins/master/plugins.ubi9.txt @@ -9,3 +9,10 @@ oidc-provider:89.v3dfb_6d89b_618 # plugins modified to fix incompatibilities git-client:6.3.3 +ssh-credentials:361.vb_f6760818e8c +configuration-as-code:1985.vdda_32d0c4ea_b_ +credentials:1419.v2337d1ceceef +structs:353.v261ea_40a_80fb_ +commons-lang3-api:3.18.0-98.v3a_674c06072d +gson-api:2.13.1-153.vb_3d0c48a_a_b_4a_ +script-security:1378.vf25626395f49 From 74d16d2b34961fa574f8626795534439a81d1533 Mon Sep 17 00:00:00 2001 From: brais <26645694+BraisVQ@users.noreply.github.com> Date: Fri, 7 Aug 2026 16:08:11 +0200 Subject: [PATCH 3/3] changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 134c6bbf2..aa9da990e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,7 @@ - Fixed VIT0089531 ([#1393](https://github.com/opendevstack/ods-core/pull/1393)) - Fixed VIT0089530 ([#1392](https://github.com/opendevstack/ods-core/pull/1392)) - Harden post-creation scripts against RCE and credential exfiltration: remove `CD_PASSWORD` from the scripts environment and restrict the scripts/config repositories to an explicit `POST_CREATION_SCRIPTS_REPO_ALLOWLIST` (finding F-05) ([#1396] https://github.com/opendevstack/ods-core/pull/1396) +- Fix Git plugins that broke Jenkins ([#1401](https://github.com/opendevstack/ods-core/pull/1401)) ## [4.13.1] - 2026-07-30 ### Fixed