Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@
- Fixed VIT0089531 ([#1393](https://github.com/opendevstack/ods-core/pull/1393))
- Fixed VIT0089530 ([#1392](https://github.com/opendevstack/ods-core/pull/1392))
- Harden post-creation scripts against RCE and credential exfiltration: remove `CD_PASSWORD` from the scripts environment and restrict the scripts/config repositories to an explicit `POST_CREATION_SCRIPTS_REPO_ALLOWLIST` (finding F-05) ([#1396] https://github.com/opendevstack/ods-core/pull/1396)
- Fix Git plugins that broke Jenkins ([#1401](https://github.com/opendevstack/ods-core/pull/1401))

## [4.13.1] - 2026-07-30
### Fixed
Expand Down
10 changes: 8 additions & 2 deletions jenkins/master/plugins.ubi9.txt
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,11 @@ allure-jenkins-plugin:2.34.0
oidc-provider:89.v3dfb_6d89b_618

# plugins modified to fix incompatibilities
git-client:6.6.1
git:5.10.1
git-client:6.3.3
ssh-credentials:361.vb_f6760818e8c
configuration-as-code:1985.vdda_32d0c4ea_b_
credentials:1419.v2337d1ceceef
structs:353.v261ea_40a_80fb_
commons-lang3-api:3.18.0-98.v3a_674c06072d
gson-api:2.13.1-153.vb_3d0c48a_a_b_4a_
script-security:1378.vf25626395f49
Loading