Adding 2024 recap blog post

content/blog/2025/01/08/2025-01-08-jenkins-2024-recap.adoc

@@ -0,0 +1,176 @@
+---
+layout: post
+title: "Jenkins 2024 in Review"
+tags:
+- jenkins
+- newsletter
+- community
+- contribute
+authors:
+- dduportal
+- markewaite
+- gounthar
+- wadeck
+- kmartens27
+- alyssat
+- janfaracik
+- timja
+opengraph:
+  image: /images/post-images/2025/01/08/2024-recap.png
+links:
+discourse: true
+---
+
+image:/images/post-images/2025/01/08/2024-recap.png[Jenkins 2024 recap]
+
+As we start 2025, we wanted to take a look back at the previous year and highlight some of our favorite moments, biggest projects, and important changes that occurred over the last 366 days.
+Regardless of what form a contribution takes, the Jenkins project consists of all of them and without them, we would not be what we are today.
+From every pull request, to the grants and donations that help Jenkins keep up with the needs of the Jenkins community, we offer our deepest thanks and appreciation.
+
+Jenkins 2024 By the Numbers from link:https://stats.jenkins.io/statistics[stats.jenkins.io]:
+image:/images/post-images/2025/01/08/jenkins-by-the-numbers.png[Jenkins 2024 by the numbers]
+
+[[infrastructure]]
+image:/images/post-images/2025/01/08/infrastructure.png[Infrastructure Update]
+
+Thanks to the efforts of the Jenkins infrastructure team, the Jenkins update center has been migrated to a new mirror-based architecture, which is 10x more cost-effective and is link:https://www.jenkins.io/blog/2024/11/16/new-update-center/[now in production].
+Over several months, Jenkins Infra performed multiple brownouts to test the services and ensure that there would be no issue with the migration.
+The tests were successful and they were able to detect issues that would have caused major headaches for users.
+Thankfully, these issues were resolved and while there were a few bumps post migration, the update center has been doing very well over the last few weeks.
+
+Throughout the year, the Jenkins infrastructure team has been working on several areas to reduce operating costs all around.
+This has taken the form of converting the spending and usage in some areas to others, migrating the update center, and finding new ways to alleviate the spending, all while increasing the overall Jenkins job count.
+Their efforts may be unseen at times, but they are always felt throughout the project.
+
+[[security]]
+image:/images/post-images/2025/01/08/security.png[Security Update]
+
+At the beginning of 2024, link:https://www.jenkins.io/blog/2024/01/25/sonar-vulnerability-report/[Sonar worked with the Jenkins security team] to address a previously unnoticed vulnerability.
+The issue was very niche and would only execute given a specific set of circumstances and permissions, so there was no larger threat here.
+However, the fact that this vulnerability existed was enough reason for Jenkins security and Sonar to collaborate and resolve this issue.
+Thanks to their in-depth work and tenacity in removing the vulnerability, Jenkins continues to be a secure and well-maintained DevOps platform.
+
+Additionally, thanks to Alpha Omega for their link:https://www.jenkins.io/blog/2024/10/04/content-security-policy-grant/[grant and collaboration], we have been able to make a concerted effort to update the CSP for Jenkins.
+Their grant has allowed us to bring in two key contributors to take on the work of this project and their work has been nothing short of incredible.
+From the very start of the project, Shlomo Dahan and Yaroslav Afenkin, under the guidance of Basil Crow, have been working furiously to help improve the CSP of Jenkins and bring some of the most important plugins up to speed.
+
+By the numbers:
+
+* Published 6 security advisories for Jenkins core
+* Published 8 security advisories for 33 Jenkins plugins
+
+In addition to the collaboration with Sonar, the Jenkins Security team has worked constantly throughout 2024 to ensure that security issues are acknowledged and resolved whether they are for Jenkins core or plugins within the ecosystem.
+
+[[platform]]
+image:/images/post-images/2025/01/08/platform-modernization.png[Platform Modernization Update]
+
+Over the summer, the Jenkins weekly release line made the move to link:https://www.jenkins.io/blog/2024/06/11/require-java-17/[require Java 17] as a baseline.
+This was an important update to keep up with current usage and start the process of dropping support for Java 11.
+Thanks to the hard work and dedication of Jenkins developers, the transition was successful and we saw a steady rise in JDK 17 installation and usage.
+By the end of October LTS release, the Java 17 requirement had been thoroughly tested and used over the preceding months, ensuring that its inclusion would be safe.
+Since the October release of LTS 2.479.1, we have not seen any major issues with Java 17 usage.
+While there have been some hiccups when it comes to upgrading plugins alongside the Jenkins LTS, these have been addressed as they come up and typically can be resolved by ensuring the plugin is updated before and after upgrading Jenkins.
+
+In addition to the move to Java 17, Jenkins developers worked tirelessly to upgrade to Spring Security and Framework 6, Eclipse Jetty 12, and Jakarta EE 9.
+These upgrades were crucial to ensuring that Jenkins is keeping up with current trends and usage of the platform.
+They are also major updates in security, ensuring that the Jenkins project is doing everything it can to protect its users during development.
+
+[[documentation]]
+image:/images/post-images/2025/01/08/documentation.png[Documentation Update]
+
+We've completed one full year of link:https://contributors.jenkins.io/[Contributor Spotlight] posts, highlighting the different backgrounds, skills, and work that make up the Jenkins community.
+This space has allowed us to show appreciation for those who keep Jenkins fresh, strong, and viable so consistently.
+From long-time contributors and early adopters of Jenkins, to recent Google Summer of Code participants, there are all kinds of stories to tell and efforts to acknowledge.
+Thanks to all the contributors who have collaborated with us for the contributor spotlight and for allowing us to share their stories.
+Additionally, new contributors have been welcomed to Jenkins through community projects, including Hacktoberfest and another successful Google Summer of Code.
+
+Through these partnerships and community projects, we have been able to expand the Jenkins community by welcoming new contributors to the project, regardless of the size of their contributions.
+By providing exposure to open-source practices and expectations, we have enriched the project and open-source community as a whole.
+While participating in these events, contributors have helped update areas of Jenkins documentation and the creation of link:https://stats.jenkins.io/[stats.jenkins.io].
+Even though our Google Summer of Code projects are specific to Jenkins, how to work with an open-source project and engage with the community are invaluable experiences that will expand these contributors' skills beyond Jenkins.
+Both Hacktoberfest and GSoC have become yearly events for Jenkins and we thank them for allowing us to collaborate and to the contributors who help Jenkins continue to be an ever-growing project.
+
+[[outreach]]
+image:/images/post-images/2025/01/08/outreach-and-advocacy.png[Outreach and Advocacy Update]
+
+Throughout 2024, there were several events that Jenkins participated in that allowed us to connect with the Jenkins and extended open-source communities.
+We started the year by gathering in Brussels for FOSDEM and a hugely successful link:https://www.jenkins.io/blog/2024/02/28/jenkins-contributor-summit-and-fosdem-recap/[Jenkins contributor summit].
+The contributor summit provided a space for Jenkins contributors to meet and connect in person, get updates and roadmap plans from Jenkins officers, and work on a handful of different projects together.
+It is not often that we are all able to meet in-person, so these kind of events are hugely invaluable.
+
+In addition to DevOps World and FOSDEM, Jenkins had a presence at the Open Source Summit Europe, where author:gounthar[Bruno Verachten] gave a talk detailing how and why the link:https://www.jenkins.io/blog/2024/10/25/jenkins-tutorial-revamp/[Jenkins tutorial revamp] has been needed and successful.
+He shared details about how incorporating Docker Compose makes the tutorial experience more simplified and beneficial to the user overall, and how it is safer than using the previous Docker-in-Docker method.
+Users benefit from both the comfort of knowing their build is secure and a more straightforward example, allowing them to get started faster.
+
+The last event of the year that involved Jenkins was an link:https://techstrong.tv/videos/cd-pipeline/behind-the-code-jenkins-upgrades-challenges-and-evolution-the-cd-pipeline-ep15[episode of Techstrong TV] that featured author:markewaite[Mark Waite], author:basil[Basil Crow], author:dduportal[Damien Duportal], and author:krisstern[Kris Stern], where they discussed the challenges and successes of the ever-evolving Jenkins project.
+They discussed how upgrades and the constantly changing landscape of development influence the Jenkins project's direction and what it takes to manage a large project like Jenkins.
+Thanks to Techstrong TV for having Jenkins on and to the Jenkins representatives for sharing their insights and anecdotes about the project.
+
+[[modern-ui]]
+image:/images/post-images/2025/01/08/ui-ux.png[User Experience Update]
+
+There were also presentations from link:https://www.jenkins.io/blog/2024/08/29/jenkins-design/[Jenkins contributors at the virtual DevOps World event], showcasing some of the UI/UX updates and enhancements that have been implemented in the last year.
+This includes everything from buttons and menu items being refreshed, to more modern page design, and enhancements intended to make the Jenkins user experience more smooth and inviting overall.
+There have been additional UI updates since the talk, such as providing the help text within Jenkins directly, instead of hiding it in an extra button.
+This allowed us to showcase the work and effort that goes into refining the Jenkins experience even further.
+Thanks to author:janfaracik[Jan Faracik] and author:timja[Tim Jacomb] for delivering this talk and providing so many great updates to the Jenkins UI/UX.
+
+Additional thanks to all those who help enhance the Jenkins UX/UI through their efforts to provide the best experience possible.
+Constantly working to enhance the Jenkins user experience, the folks working on UI/UX have a passion for making Jenkins more sleek and modern.
+This passion translates to providing Jenkins users with a more friendly and enjoyable experience when using Jenkins, whether they're long-time users or just getting started.
+They have refreshed Jenkins menus and pages, link:https://www.jenkins.io/blog/2024/12/02/pr-titles/[incorporated user generated requests], and implemented several changes to refine the UI such as overhauling the search function.
+Jenkins is now over 13 years old, but it has received more than just a fresh coat of paint over the years, and the UI/UX SIG has played a critical role in making sure that Jenkins is as appealing as it is powerful.
+
+[[grants-and-sponsorships]]
+image:/images/post-images/2025/01/08/sponsor-contributions.png[Grants and Sponsors]
+
+Over the last year, we have received several grants and sponsorships that allow the project to not only continue to function but improve in ways that benefit all users and developers.
+We have used link:https://www.jenkins.io/blog/2024/07/24/amazon-donates-to-jenkins/[AWS] and link:https://www.jenkins.io/blog/2024/07/26/microsoft-donates-to-jenkins/[Microsoft Azure] to provide many different services over the years, and their continued support allows us to continue to do so.
+From download points to powering the controllers that build Jenkins, their donations help ensure Jenkins' lights stay on.
+
+Thanks to all of our sponsors, for supporting Jenkins throughout the year in so many ways and places.
+From providing infrastructure support, financial support, or making it possible for Jenkins to reach further globally, we would be remiss if we did not share our appreciation for all that you provide:
+
+*Platinum*
+
+* CloudBees
+
+*Gold*
+
+* Continuous Delivery Foundation
+* AWS
+* Microsoft Azure
+* DigitalOcean
+* GitHub
+* JFrog
+* Atlassian
+
+*Silver*
+
+* Datadog
+* Discourse
+* Fastly
+
+*Bronze*
+
+* IBM
+* Netlify
+* PagerDuty
+* Sentry
+
+*Mirrors*
+
+* Oregon State Open Source Lab
+* Tsinghua University
+* XMission
+* Belnet
+* RWTH Aachen University
+* FreeDif
+* Servana
+* SA Hilster
+* Jing Luo
+* Taiwan Digital Streaming Co
+* OSSPlanet
+* Yamagata University
+* Yandex
+* Hostico