diff --git a/source/partials/release_notes/_release-23-5-0.md.erb b/source/partials/release_notes/_release-23-5-0.md.erb new file mode 100644 index 0000000000..d6f7e437ad --- /dev/null +++ b/source/partials/release_notes/_release-23-5-0.md.erb @@ -0,0 +1,45 @@ +This release is a maintenance and bug-fix release. + +

Enhancements

+ +* <%= link_to_issue 12353, 'Starting this release, Alpine 3.19 based container images for GoCD Agent are' %> <%= link_to 'available', 'https://hub.docker.com/r/gocd/gocd-agent-alpine-3.19' %>. +* <%= link_to_issue 12353, 'Build the default GoCD Server image on Alpine 3.19' %> +* <%= link_to_issue 12212, 'Make template selector dropdowns alphabetically sorted' %> + +

Bug fixes

+ +* <%= link_to_issue 12220, 'Console view toolbar not shown after scrolling on v23.4.0' %> +* <%= link_to_issue 12305, 'Unable to pick stage from Add Material menu in Chrome on MacOS Sonoma' %> +* <%= link_to_issue 12389, 'Fix disappearing second+ stages on VSM view after clicking a stage' %> +* <%= link_to_issue 12392, 'Correct display of "cancelled by" for stage runs other than that being viewed' %> + +

Security fixes

+ +We regularly fix security issues reported by security researchers & upgrade dependencies to mitigate known vulnerabilities. +Upgrading to the latest release is always recommended. + +There are no security fixes specifically known to affect GoCD included in this release. + +

APIs

+ +Improvements, deprecations and breaking changes in the API and plugin API have been moved to their respective changelogs +- <%= link_to_versioned_api '23.5.0','changes-in-23-5-0', 'API changelog for 23.5.0' %> and + <%= link_to_versioned_plugin_api '23.5.0','changes-in-gocd-23-5-0', 'Plugin API changelog for 23.5.0' %>. + +

Contributors

+ +<%= [ + "Aravind SV", + "Chad Wilson", + "Chris Gillatt", + "Lewis Jales-Huggins", +].sort.uniq.join(', ') +%> + +

Note

+ +A more comprehensive list of changes for this release can be found <%= link_to_full_changelog 'here.', 'Release 23.5.0' %> + +Found a security issue that needs fixing? Please report it to <%= link_to 'https://hackerone.com/gocd', 'https://hackerone.com/gocd' %> + +Please report any issues that you observe on [GitHub issues](https://github.com/gocd/gocd/issues). diff --git a/source/posts/2023-02-13-gocd-project-status.html.markdown.erb b/source/posts/2023-02-13-gocd-project-status.html.markdown.erb index 01088ff9aa..ababdaa702 100644 --- a/source/posts/2023-02-13-gocd-project-status.html.markdown.erb +++ b/source/posts/2023-02-13-gocd-project-status.html.markdown.erb @@ -99,7 +99,7 @@ The **"good"** news: - We believe GoCD was built with solid security principles in mind that have generally stood the test of time. - Software dependencies incorporated within GoCD are _generally_ still under active development, and thus being patched/updated. These are being incorporated into new GoCD releases without major issue. -- GoCD runs on and is built/test using modern, maintained language runtimes (Java 17 LTS, NodeJS 18 LTS, Ruby 3.1) +- GoCD runs on and is built/test using modern, maintained language runtimes (Java 17 LTS, NodeJS 20 LTS, Ruby 3.1) - GoCD continues to have good compatibility with latest operating systems, which can be extended to its supported [Docker images](/download.html). @@ -115,7 +115,7 @@ The **"not-so-good"** news: of languages used across the codebase and many different features that make it difficult for a small team to support. Keeping on top of all of these requires non-trivial effort, and is likely not indefinitely sustainable with the current contributor/maintainer community size. -- At time of writing, GoCD does depend on some libraries/frameworks which require significant effort to upgrade, but are +- At time of writing _(updated: December 2023)_, GoCD does depend on some libraries/frameworks which require significant effort to upgrade, but are end-of-life, and thus present some level of ongoing risk. If a major vulnerability is discovered in these libraries/frameworks that affects GoCD it will either require an urgent upgrade, or forking and patching of those libraries/frameworks. The community is not well placed to manage this kind of development. To help you assess risk, at time of writing, they include (but may not be limited to) @@ -123,7 +123,10 @@ The **"not-so-good"** news: - Spring Framework 4.3 (EOL December 2020) - Spring Security 4.2 (EOL October 2020) - Hibernate ORM 3.6 (EOL February 2012) - - A small part of the UI relies on [AngularJS](https://angularjs.org/) 1 and PrototypeJS 1.6 + - A small part of the UI relies on + - [AngularJS](https://angularjs.org/) 1.0 - plugin view templating support (EOL November 2013) + - [jQuery](https://jquery.com/) 1.7 - stage and build/job detail views (subsequent upgraded in GoCD 23.4.0) + - PrototypeJS 1.6 - stage and build/job detail views (subsequently replaced with jQuery in GoCD 23.5.0) ### How can my organization or myself help with maintenance of GoCD?