-
Improvement
-
Resolution: Not A Defect
-
Major
-
None
JAXB was removed from Java 9+. In 2.164, JAXB was detached into the JAXB API plugin, which means that any plugin with a Jenkins baseline prior to 2.164 will get JAXB on its classpath via the detached plugin mechanism. Any plugin with a Jenkins baseline greater than or equal to 2.164 will get JAXB on its classpath if and only if it declares a plugin-to-plugin dependency on JAXB (recommended) or embeds JAXB into its own .jpi via a direct or transitive dependency.
A systematic search of the plugin corpus was conducted on May 9, 2022; this search revealed that this plugin has a baseline greater than or equal to 2.164, a direct or transitive usage of JAXB, no plugin-to-plugin dependency on JAXB, and no copy of JAXB in the .jpi. The recommendation for this plugin is to stop bundling a shaded copy of XStream, rather instead excluding XStream from the .jpi file as it is provided by Jenkins core.
This plugin's identified usage of JAXB is as follows:
Plugin nexus-jenkins-plugin:3.14.407.v9d113b_445204 using javax/xml/bind/DatatypeConverter via hidden/com/thoughtworks/xstream/core/util/Base64JAXBCodec.class