# 13 Jan 2025

[:movie_camera: Zoom Meeting Room](https://zoom.us/j/91564716663?pwd=R3A2RDFGcU1wTVdoVTErYm1jNzVWdz09) | [:calendar: Shared Calendar](https://jenkins.io/event-calendar/) | [:notes: Meeting notes](https://community.jenkins.io/tag/governance) |

## Attendees 👥

<!-- Handles are GitHub handles -->
* @basil (Basil Crow)
* @MarkEWaite (Mark Waite)
* @NotMyFault (Alexander Brandes)
* @slide (Alex Earl)
* @jonesbusy (Valentin Delaye)
* @kmartens27 (Kevin Martens)
* @gounthar (Bruno Verachten)

## Upcoming Calendar 📆

* Next weekly release: 2.489, Tuesday January 16, 2025
* Next LTS: February 5, 2025
* Release candidate January 22, 2025
* Next major events:
* [Jenkins contributor summit](https://community.jenkins.io/t/jenkins-contributor-summit-on-jan-31-2025-call-for-topics-and-ideas/21678) 31 Jan 2025
* Alyssa Tong has the venue for up to 24 participants and is organizing logistics
* Bruno Verachten organizing the [agenda](https://community.jenkins.io/t/jenkins-contributor-summit-on-jan-31-2025-call-for-topics-and-ideas/21678)
* [FOSDEM 2025](https://fosdem.org/2025/) - February 1-2, 2025
* Jenkins is confirmed for a stand
* We plan to sell Jenkins T-shirts, brought to Belgium by Mark Waite

## Agenda

### News

* To be determined

### Action Items

* Basil create the attribution entries for the downloads page
* Jenkins sponsors have changed
* Continues on the to-do list [draft PR](https://github.com/jenkins-infra/jenkins.io/pull/6882)

### Community activity

* Jenkins Content Security Policy project
* [Announcement](https://www.jenkins.io/blog/2024/10/04/content-security-policy-grant/), progress report [one](https://www.jenkins.io/blog/2024/11/01/jenkins-csp-project-update/), [two](https://www.jenkins.io/blog/2024/12/05/jenkins-csp-project-update/), and three
* Adapting plugins to be compatible with a future, broader implementation of a more restrictive content security policy
* Submitting pull requests, releasing plugins, preparing for future enablement in core
* Project is complete - [tracking sheet](https://docs.google.com/spreadsheets/d/1nSx4gQ2YUl-sKdY5u6biXmyDnkQ26wTaMBLSR8gr_-A/edit?usp=sharing)
* Yaroslav Afenkin and Shlomo Dahan on the project until end of calendar year
* Released CSP fixes for Jenkins core and more than 40 plugins
* Run Jenkins ATH with CSP enabled
* Static Analysis of CSP violations across the Jenkins repositories (Daniel Beck's [CSP scanner](https://github.com/daniel-beck/csp-scanner))
* Jenkins Content Security project part 2
* Possible project scope is being discussed with Jenkins security team
* No funding commitment from Alpha Omega yet, but hopeful they will fund the next phase of the project
* Mark Waite check with Michael Winser on details needed to request 2025 funding
* Spring Security 6.x Upgrade - [mailing list thread](https://groups.google.com/g/jenkinsci-dev/c/gsXAqOQQEPc/m/4fn4Un1iAwAJ)
* [Upgrade guide](https://www.jenkins.io/doc/upgrade-guide/2.479/#upgrading-to-jenkins-lts-2-479-1) and [changelog](https://www.jenkins.io/changelog-stable/2.479.1/)
* Some plugins require a [lockstep upgrade](https://www.jenkins.io/doc/upgrade-guide/2.479/#upgrade-spring-security-spring-framework-and-servlet-containers)
* Build failure results analyzer known failure
* Requires a lockstep upgrade in a relatively minor feature of the plugin (released 6 weeks ago)
* [Contributor Spotlight](https://contributors.jenkins.io/)
* 12 months of contributor spotlights completed, more to come
* Recently published: [Vincent Latombe](https://contributors.jenkins.io/pages/contributors/vincent-latombe/)

### Governance Topics

* $9000 available for Jenkins project at Software in the Public Interest
* Approved last meeting that funds will be used as travel reimbursement for Jenkins Contributor Summit and FOSDEM
* Finalized funding priority in the [list of attendees](https://docs.google.com/spreadsheets/d/1n-G2zXkr1exJ4HDDAcrFKRq1ZJoH5BvXokCD4ww4XHs/edit?gid=0#gid=0)
* Java [tip and tail release model](https://mail.google.com/mail/u/0/#inbox/FMfcgzQXKWpRqwpwrbWJfNSLgShWNvbZ) discussion 17 Dec 2024
* Bruno attend for Jenkins project, consider Basil as a possible attendee
* How can downstream libraries adopt the release model?
* What if Eclipse Jetty adopts it or if Spring adopts it?
* Increasing diversity in Jenkins leadership - Alex Earl
* Cloud expenses and plans
* Azure (CDF paid)
* July: $4.6k
* August: $4.5k
* September: $3.9k
* October: $4.2k
* November: $4.3k
* December:
* Azure Sponsorship (Microsoft Credits) - $41k remaining, donation ends May 2025
* July: $10k
* August: $10.5k
* September: $10.3k
* October: $12.9k
* November: $13k
* December:
* DigitalOcean - Remaining $15k (~5k consumed) until 02 January 2025
* July: $176
* August $200
* September: $158
* October: $196
* November: $146
* December:
* AWS:
* CloudBees:
* July: $6.5k
* August: $6.3k
* September: $6.3k
* October: $6.4k
* November: $3.9k
* December:
* Sponsored account
* October: $178
* November: $482
* December:
* Global Status:
* Credits left: $59,800 until 31 January 2025
* Credits left: $60k until 31 July 2025
* Moving ci.jenkins.io to AWS sponsored account
* Likely $10k per month Dec 2024 - Jul 2025