Devin Nusbaum

Add support for repositories body parameter when creating installation access tokens

1

# Description This PR adds support for the `repositories` body parameter as specified in https://docs.github.com/en/rest/apps/apps#create-an-installation-access-token-for-an-app to `GHAppCreateTokenBuilder`. Originally, if you wanted to generate an installation access token limited to a...

Fixes #67, which was caused by the fix for SECURITY-1754. Just opening a quick draft PR for now showing how the problem could be fixed. We would need to do...

Fixes #59. See explanation of the bug/fix [here](https://github.com/jenkinsci/groovy-sandbox/issues/59#issuecomment-576414147).

Remove `default-allowlist` entries for Groovy source files related to Declarative

4

In 76a7681702f42d65f77bbaa5463f146876ea62db, we added an allowlist mechanism for loading arbitrary Groovy source files from the classpath. This included a `default-allowlist` file with entries related to various plugins that relied on...

See [JENKINS-67836](https://issues.jenkins.io/browse/JENKINS-67836). https://github.com/jenkinsci/workflow-cps-plugin/commit/f7ae7b75a457976853539bff1db52373b85fdb85 started using hashes for checkout directory names for `CpsScmFlowDefinition`. These hashes are always 64 characters, which leads to issues on Windows, which limits path names to 260...

See https://github.com/jenkinsci/groovy-sandbox/pull/77. I should probably file a Jira ticket as well. I am leaving this as a draft until the downstream PR is released. - [x] Make sure you are...

[JENKINS-42214] SandboxInterceptor must account for static members being accessed via objects instead of class references

4

See [JENKINS-42214](https://issues.jenkins-ci.org/browse/JENKINS-42214). Fixing the issue going forward is easy enough, but I need to check the upgrade behavior for existing field signatures in their `scriptApproval.xml` that would be considered invalid...

See [JENKINS-69899](https://issues.jenkins.io/browse/JENKINS-69899). When `@Field` is used on a declaration like `String foo` that does not initialize the variable, the `FieldNode` created by `FieldASTTransformation` has an initial value that is `EmptyExpression`...

See https://github.com/jenkinsci/workflow-cps-plugin/pull/538#issuecomment-1883042255 and https://github.com/jenkinsci/workflow-cps-plugin/pull/538#issuecomment-1883348978. I have not been able to reproduce the issue yet, so this is just a speculative change.

Delete `DownstreamJobListener` and instead create `NodeDownstreamBuildAction` dynamically during graph processing based on `DownstreamBuildAction`

6

`DownstreamJobListener` here has the same bug as https://github.com/jenkinsci/pipeline-build-step-plugin/pull/127 for completed builds. Prior to https://github.com/jenkinsci/workflow-cps-plugin/pull/807, this only worked as long as you were using the `MAX_SURVIVABILITY` durability level, otherwise it did...