240.v6d844a_6f5480

🐛 Bug fixes

• Fix "NullPointerException: Access key ID cannot be blank" (#260) @basil

239.v6681a_0ea_46ef

👻 Maintenance

• Adapt to removal of STS module (#259) @basil

238.v8fb_588a_2b_e67

🚀 New features and improvements

• JENKINS-73649 - Use AWS SDK for Java 2.x (#254) @basil

✍ Other changes

• Enable Jenkins Security Scan (#245) @strangelookingnerd

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 4.75 to 4.86 (#244) @dependabot
• Bump io.jenkins.tools.incrementals:git-changelist-maven-extension from 1.7 to 1.8 (#243) @dependabot

231.v08a_59f17d742

👷 Changes for plugin developers

• Silence warnings for fields with no getters (#238) @rsandell

✍ Other changes

• Test with Java 21 (#230) @MarkEWaite

218.v1b_e9466ec5da_

👷 Changes for plugin developers

• Refresh plugin for August 2023 (#229) @basil

📝 Documentation updates

• Even though this plugin was initially open-sourced from CloudBees work, it shouldn't be branded as CloudBees. (#127) @Vlatombe

👻 Maintenance

• chore: use jenkins infra maven cd reusable workflow (#150) @jetersen
• Replacing JSR-305 javax.annotations with Spotbugs (#193) @aneveux
• Increase spotbugs checks and fix redundant interface declaration (#189) @aneveux
• Updating parent pom and bom (#188) @aneveux

📦 Dependency updates

• Bump jenkins-infra/interesting-category-action from 1.0.0 to 1.2.1 (#178) @dependabot
• Bump jenkins-infra/verify-ci-status-action from 1.2.0 to 1.2.2 (#176) @dependabot
• Bump git-changelist-maven-extension from 1.3 to 1.6 (#198) @dependabot
• Bump actions/checkout from 2.4.0 to 3.3.0 (#190) @dependabot
• Bump jenkins-infra/jenkins-maven-cd-action from 1.2.0 to 1.3.3 (#195) @dependabot
• Bump actions/setup-java from 2.5.0 to 3.10.0 (#196) @dependabot

191.vcb_f183ce58b_9

🐛 Bug fixes

• [SECURITY-2351] CVE-2022-27198 (CSRF), CVE-2022-27199 (permission check)

CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier does not perform a permission check in a method implementing form validation. Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

189.v3551d5642995

🐛 Bug fixes

• JENKINS-67452 - Do not add blank external ids (#125) @jtnord

📦 Dependency updates

• Bump plugin from 4.28 to 4.33 (#123) @dependabot
• Bump git-changelist-maven-extension from 1.2 to 1.3 (#120) @dependabot

👻 Maintenance

• Enable CD for this plugin (#126) @Vlatombe

1.33

🚀 New features and improvements

• JENKINS-65105 - : Support for externalID when using role (#88) @hitesh22

📦 Dependency updates

• Bump bom-2.249.x from 950.v396cb834de1e to 961.vf0c9f6f59827 (#104) @dependabot
• Bump plugin from 4.27 to 4.28 (#106) @dependabot

1.32

🚀 New features and improvements

• Deleting CredentialsBindingHandler.toBindings (#87) @jglick

📦 Dependency updates

• Use version from bom (#102) @Vlatombe
• Replace heavyweight aws-java-sdk with fine-grained aws-java-sdk-ec2 (#93) @Vlatombe
• Bump plugin from 4.2 to 4.27 (#98) @dependabot
• Bump git-changelist-maven-extension from 1.0-beta-7 to 1.2 (#100) @dependabot

1.31

Enable release drafter