Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-33843

It's not possible to disable/uninstall optional dependencies

    • 2.181

      The plugin manager UI does not allow disabling or removing optional dependencies, i.e. dependencies that are declared by plugins to be not strictly necessary for their use.

      This should be possible, maybe with a warning that not all features of the depending plugin will be available afterwards.

          [JENKINS-33843] It's not possible to disable/uninstall optional dependencies

          Jesse Glick added a comment -

          At least some of the confusing overlap is old.

          Jesse Glick added a comment - At least some of the confusing overlap is old .

          Great news that this is resolved. Which version will have this fixed?

          (I see it in Jenkins ver. 2.164.2 where I can't uninstall Static Analysis Utilities 1.96 (which has a security warning and is end-of-life) due to an optional dependency to it from Email Extension Plugin 2.66 which I still use)

          Andrei Costescu added a comment - Great news that this is resolved. Which version will have this fixed? (I see it in Jenkins ver. 2.164.2 where I can't uninstall Static Analysis Utilities 1.96 (which has a security warning and is end-of-life) due to an optional dependency to it from Email Extension Plugin 2.66 which I still use)

          Daniel Beck added a comment -

          Are you sure? analysis-core 1.96 should not have a security warning, we fixed that issue.

          Daniel Beck added a comment - Are you sure? analysis-core 1.96 should not have a security warning, we fixed that issue.

          Jesse Glick added a comment -

          costescuandrei the fix is still open for review. If and when the fix is merged, this issue will be closed with details. In the meantime, see the *.disabled workaround above.

          Jesse Glick added a comment - costescuandrei the fix is still open for review. If and when the fix is merged, this issue will be closed with details. In the meantime, see the *.disabled workaround above.

          Nick Jones added a comment -

          danielbeck FWIW, analysis-core 1.96 still shows the security warning:

          We first saw the warning with 1.95 installed, upgraded, and still see it.

          Nick Jones added a comment - danielbeck FWIW, analysis-core 1.96 still shows the security warning: We first saw the warning with 1.95 installed, upgraded, and still see it.

          Daniel Beck added a comment -

          medianick Thanks. Looks like I typoed the versions regex, fixed in https://github.com/jenkins-infra/update-center2/pull/273

           

          Daniel Beck added a comment - medianick Thanks. Looks like I typoed the versions regex, fixed in https://github.com/jenkins-infra/update-center2/pull/273  

          I am postponing backport of this fix to give it some more soaking time.

          Oliver Gondža added a comment - I am postponing backport of this fix to give it some more soaking time.

          Nick Jones added a comment -

          In case it's helpful to anyone else (as I've just gone through this to uninstall Mask Passwords due to SECURITY-157), jglick's workaround disables the optional dependency in question (mask-passwords.jpi in my case), after which point the Uninstall button in the Manage Plugins page will enable, and the plugin can be uninstalled as desired.

          Nick Jones added a comment - In case it's helpful to anyone else (as I've just gone through this to uninstall Mask Passwords due to SECURITY-157 ), jglick 's workaround disables the optional dependency in question ( mask-passwords.jpi in my case), after which point the Uninstall button in the Manage Plugins page will enable, and the plugin can be uninstalled as desired.

          This change seems to allow now to also uninstall/disable implied plugins. So release 2.176.2 introduced with JENKINS-57528 the change that all implied plugins are also installed, and now I can uninstall them again manually?

          Michael Düsterhus added a comment - This change seems to allow now to also uninstall/disable implied plugins. So release 2.176.2 introduced with JENKINS-57528 the change that all implied plugins are also installed, and now I can uninstall them again manually?

          Jesse Glick added a comment -

          Or disable them, yes. Really it might be better for Docker image users to have an alternate distribution of jenkins.war without any detached plugins.

          Jesse Glick added a comment - Or disable them, yes. Really it might be better for Docker image users to have an alternate distribution of jenkins.war without any detached plugins.

            jglick Jesse Glick
            danielbeck Daniel Beck
            Votes:
            20 Vote for this issue
            Watchers:
            23 Start watching this issue

              Created:
              Updated:
              Resolved: