February 2020 - Zuul-announce - lists.opendev.org

Zuul 3.17.0 released (security update)
by corvus＠inaugust.com 28 Feb '20

28 Feb '20

The Zuul team is pleased to announce the release of Zuul 3.17.0. Download it from PyPI: https://pypi.org/project/zuul The release notes, included below, are also available in the documentation with hyperlink references: https://zuul-ci.org/docs/zuul/3.17.0/reference/releasenotes.html Security Issues =============== * The add_host module attributes that can be used to bypass localhost command execution are now also blacklisted using extra-vars to prevent abuse through untrusted host_vars. New Features ============ * The Github driver now has a basic support for the Github checks API. To enable reporting build results via the checks API one can configure the the new pipeline.<reporter>.<github source>.check attribute on the Github reporter. It’s also possible to trigger on a requested or completed check_run. To be able to use the checks API, zuul must be authenticated as Github app. For more information about the necessary requirements, please see the GitHub driver documentation.

1 0

Zuul 3.16.1 released
by corvus＠inaugust.com 13 Feb '20

13 Feb '20

The Zuul team is pleased to announce the release of Zuul 3.16.1. Download it from PyPI: https://pypi.org/project/zuul The release notes, included below, are also available in the documentation with hyperlink references: https://zuul-ci.org/docs/zuul/3.16.1/reference/releasenotes.html The release is a bugfix release issued shortly after 3.16.0. Release notes for both are included below: Upgrade Notes ============= * The default for <gerrit connection>.auth_type has changed from digest to basic. Digest authentication has not been supported in Gerrit since version 2.15. If your Zuul connects to an older version of Gerrit via HTTP authentication, you may now need to explicitly set this value. New Features ============ * A new tenant option tenant.disallowed-labels (similar to tenant.allowed-labels) can be used to restrict what labels a tenant has access to. Bug Fixes since 3.16.0 ====================== * When using GitHub app authentication the fallback to anonymous access was broken for repositories not having installed the zuul app. Bug Fixes since 3.15.0 ====================== * Files matcher has been fixed to act like irrelevant files matcher when no files are present in the tested change, i.e. it now matches such empty changes instead of rejecting them.

1 0

zuul-jobs: removal of upload-afs role
by Ian Wienand 05 Feb '20

05 Feb '20

Hello, The upload-afs role is deprecated and we plan to remove it with change [1] around two weeks from this notice; that is around the 19th Feburary, 2020. The role has been moved to upload-afs-roots with change [2]. Thus you can simply rename any current users of the role without any other changes. This role allows for some very useful processing for documentation trees, where you wish to fully synchronize some diretories but leave others alone (old branch documents, say). However it is less suitable for generic copying which we have simplified into a partner role upload-afs-synchronize. This will remove the somewhat misleading generic name and make it clearer what both roles achieve. Please contact zuul-discuss [3] with any concerns. -i [1] https://review.opendev.org/705373 [2] https://review.opendev.org/705368 [3] http://lists.zuul-ci.org/cgi-bin/mailman/listinfo/zuul-discuss

1 0