Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suspend distribution of Confluence publisher plugin #756

Merged

Conversation

MarkEWaite
Copy link
Contributor

Suspend distribution of Confluence publisher plugin

jenkins-infra/helpdesk#3856 explains that the Confluence publisher plugin uses a dependency that is not open source licensed.

The Confluence publisher libraries are Atlassian licensed including:

  • com.atlassian.confluence:confluence-java-api:7.14.0
  • com.atlassian.confluence:confluence-rest-client:7.14.0
  • com.atlassian.confluence:confluence-rest-serialization:7.14.0
  • com.atlassian.confluence:confluence-rest-api:7.14.0

The Atlassian license is not an open source license. Refer to https://www.atlassian.com/legal/software-license-agreement for the details of the license.

https://www.jenkins.io/project/governance/#license says that the Jenkins project requires plugins that it distributes to be open source, including their dependencies. When a closed source dependency is detected in a plugin, we suspend distribution of that plugin. If maintainers update the plugin to remove the closed source dependency, distribution can begin for the new release that removes the closed source dependency.

Fixes jenkins-infra/helpdesk#3856

* Suspend Confluence publisher plugin distribution - uses closed source dependency

jenkins-infra/helpdesk#3856 explains that the
Confluence publisher plugin uses a dependency that is not open source
licensed.

The Confluence publisher libraries are Atlassian licensed including:

* com.atlassian.confluence:confluence-java-api:7.14.0
* com.atlassian.confluence:confluence-rest-client:7.14.0
* com.atlassian.confluence:confluence-rest-serialization:7.14.0
* com.atlassian.confluence:confluence-rest-api:7.14.0

The Atlassian license is not an open source license.  Refer to
https://www.atlassian.com/legal/software-license-agreement for the
details of the license.

https://www.jenkins.io/project/governance/#license says that the Jenkins
project requires plugins that it distributes to be open source, including
their dependencies.  When a closed source dependency is detected in a
plugin, we suspend distribution of that plugin.  If maintainers update
the plugin to remove the closed source dependency, distribution can
begin for the new release that removes the closed source dependency.

Fixes jenkins-infra/helpdesk#3856
@daniel-beck daniel-beck added the on-hold This PR is on hold, typically because of a dependency to another change or event. label Dec 11, 2023
@daniel-beck
Copy link
Contributor

Holding a bit for maintainer response.

@daniel-beck daniel-beck added the metadata This PR changes metadata (suspensions, labels, etc.) label Dec 11, 2023
@MarkEWaite
Copy link
Contributor Author

@jhansche approved the pull request to document that confluence publisher distribution is suspended:

@daniel-beck daniel-beck removed the on-hold This PR is on hold, typically because of a dependency to another change or event. label Dec 12, 2023
@daniel-beck daniel-beck merged commit 33eae75 into jenkins-infra:master Dec 12, 2023
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
metadata This PR changes metadata (suspensions, labels, etc.)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Suspend Confluence Publisher plugin due to closed source dependency
3 participants