This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/2.542/ for the official changelog for this release.

🚀 New features and improvements

• Add telemetry for Content Security Policy (#23901) @daniel-beck
• make the MANAGE permission enabled by default (#23873) @jtnord
• JENKINS-45927 - Truncate verbose CauseOfBlockage messages in queue (#11298) @stevearmstrong-dev
• Allow entirely disabling CSP headers (#23915) @daniel-beck
• Update Winstone to 8.1026.v31def012a_f48, add test confirming the CSP response header can be >30KB (#25901) @daniel-beck

🐛 Bug fixes

• Fix NPE in ReverseBuildTrigger due to null upstream threshold (#23916) @Zenith1415

All contributors: @MarkEWaite, @Zenith1415, @daniel-beck, @github-actions[bot], @janfaracik, @jenkins-release-bot, @jglick, @jtnord, @renovate[bot], @stevearmstrong-dev, github-actions[bot] and renovate[bot]

See https://www.jenkins.io/changelog/2.541/ for the official changelog for this release.

🔒 Security

Multiple security fixes. See the 2025-12-10 security advisory for details.

We're excited to announce the release of Jenkins 2.528.3 🎉

Changelog and upgrade guide

See the changelog and upgrade guide to learn about breaking changes and other considerations when updating.

Reporting issues

If you locate an issue with this release, please file an issue on Jira, otherwise use the forums if you're unsure whether you encounter an issue or not.

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/2.540/ for the official changelog for this release.

🚀 New features and improvements

• Ignore casing in AvatarContributor#extractDomainFromUrl (#23865) @strangelookingnerd

🐛 Bug fixes

• Show saved log recorders (#23858) @timja
• Fix CspBuilder not applying fallback to uninitialized directive (#23855) @daniel-beck
• Add CSP-compliant variant of undocumented validateButton script feature (#20345) @daniel-beck

👷 Changes for plugin developers

• Ignore casing in AvatarContributor#extractDomainFromUrl (#23865) @strangelookingnerd
• Add CSP-compliant variant of undocumented validateButton script feature (#20345) @daniel-beck

✍ Other changes

• Fix link formatting in CONTRIBUTING.md (#23875) @srijan2607

All contributors: @Vyzer9, @daniel-beck, @github-actions[bot], @jenkins-release-bot, @renovate[bot], @shbhmexe, @srijan2607, @strangelookingnerd, @timja, github-actions[bot] and renovate[bot]

Please report issues found to the release candidate announcement thread.

Final release is scheduled for 2025-12-10.

Download the release from: https://repo.jenkins-ci.org/incrementals/org/jenkins-ci/main/jenkins-war/2.528.3-rc37461.f332d7b_752a_3/jenkins-war-2.528.3-rc37461.f332d7b_752a_3.war.

After final release, the official changelog and official upgrade guide will be available on www.jenkins.io/download.

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/2.539/ for the official changelog for this release.

🎉 Major features and improvements

• JENKINS-76263 - Add Content-Security-Policy header (#11269) @daniel-beck

🚀 New features and improvements

• Add REST API to create agent from xml (#11229) @mawinter69

🐛 Bug fixes

• Fix API token rendering (#11321) @mawinter69
• JENKINS-76299 - Jenkins 2.536 and later overlap text when viewing builds for jobs with long names (#11334) @ridemountainpig

👷 Changes for plugin developers

• JENKINS-76263 - Add Content-Security-Policy header (#11269) @daniel-beck

All contributors: @daniel-beck, @jenkins-release-bot, @jglick, @mawinter69, @renovate[bot], @ridemountainpig, @timja and renovate[bot]

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/2.538/ for the official changelog for this release.

🐛 Major bug fixes

• JENKINS-76295 - Allow SSH build agents to connect (#11310) @MarkEWaite

All contributors: @MarkEWaite, @NotMyFault, @jenkins-release-bot, @renovate[bot] and renovate[bot]

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/2.529/ for the official changelog for this release.

🚨 Removed

• Delete LegacyInstancesAreScopedToHudson and associated machinery (#11225) @jglick

🚀 New features and improvements

• Add experimental Manage Jenkins layout (#11222) @janfaracik
• Optimize MappingWorksheet to avoid calling Task.getEstimatedDuration (#11293) @jglick
• Refine Changes for the experimental Run UI (#11277) @janfaracik

All contributors: @dduportal, @janfaracik, @jenkins-release-bot, @jglick, @renovate[bot] and renovate[bot]

We're excited to announce the release of Jenkins 2.528.2 🎉

Changelog and upgrade guide

See the changelog and upgrade guide to learn about breaking changes and other considerations when updating.

Reporting issues

If you locate an issue with this release, please file an issue on Jira, otherwise use the forums if you're unsure whether you encounter an issue or not.

No core changes compared to Jenkins 2.528.1

This is an automatically generated changelog draft for Jenkins weekly releases.
See https://www.jenkins.io/changelog/2.536/ for the official changelog for this release.

🚀 New features and improvements

• Redesign the reorderable list component (#10186) @janfaracik
• Log thread dump when health check exceeds 10s (#11266) @gbhat618
• JENKINS-75990 - Use the same styling for title bar mouse over effect (#11016) @ridemountainpig

🐛 Bug fixes

• JENKINS-75892 - Set the default enter delay for tooltips to 250ms (#10948) @uhafner
• Fix the ordering and visibility of experimental Run UI tabs (#11236) @janfaracik
• Revert display:flex added to pane-header (#11272) @RanjitCS
• JENKINS-76275 - Restore file fingerprint and project relationship actions to views (#11275) @Kevin-CB

All contributors: @Kevin-CB, @NotMyFault, @RanjitCS, @daniel-beck, @gbhat618, @janfaracik, @jenkins-release-bot, @renovate[bot], @ridemountainpig, @timja, @uhafner and renovate[bot]