[INFRA-2487] Remove deprecated analysis plugins from update center

[jenkins-infra-bot]

The old static analysis plugins should be removed from the update center:
https://github.com/jenkins-infra/update-center2/blob/master/src/main/resources/artifact-ignores.properties

• https://github.com/jenkinsci/pmd-plugin
• https://github.com/jenkinsci/dry-plugin
• https://github.com/jenkinsci/findbugs-plugin
• https://github.com/jenkinsci/analysis-core-plugin
• https://github.com/jenkinsci/analysis-collector-plugin
• https://github.com/jenkinsci/warnings-plugin
• https://github.com/jenkinsci/tasks-plugin
• https://github.com/jenkinsci/checkstyle-plugin

See discussion in jenkins-infra/update-center2#345

---

Originally reported by drulli, imported from: Remove deprecated analysis plugins from update center

• assignee: drulli
• status: Closed
• priority: Minor
• resolution: Fixed
• resolved: 2021-02-11T14:38:16+01:00
• imported: 2022/01/10

[jenkins-infra-bot]

danielbeck:

As of today, doing this will necessitate suspending distributions of the following plugins:

• (analysis-collector depends on analysis-core)
• android-lint depends on analysis-core
• brakeman depends on analysis-core
• ccm depends on analysis-core
• CFLint depends on analysis-core
• (checkstyle depends on analysis-core)
• ci-game depends on analysis-core
• codeclimate-plugin depends on analysis-core
• codescanner depends on analysis-core
• cpptest depends on analysis-core
• DotCi-Plugins-Starter-Pack depends on pmd, analysis-core, findbugs, analysis-collector, checkstyle
• (dry depends on analysis-core)
• (findbugs depends on analysis-core)
• php depends on pmd, analysis-core, dry, checkstyle
• (pmd depends on analysis-core)
• swamp depends on analysis-core
• (tasks depends on analysis-core)
• (warnings depends on analysis-core)

 

[jenkins-infra-bot]

drulli:

This is quite interesting I never realized that there are so many other tools using the plugins.

[jenkins-infra-bot]

danielbeck:

Ulli Hafner Is this issue still something you'd like to see implemented? If so I recommend starting a dev list conversation given the downstream impact.

[jenkins-infra-bot]

drulli:

Well, I'll at least ping the authors of those plugins first...

[jenkins-infra-bot]

drulli:

I went through the list and tried to consolidate the usage of analysis-core.

These plugins can be removed already (already marked as deprecated or archived):

• (analysis-collector depends on analysis-core)
• android-lint depends on analysis-core
• ccm depends on analysis-core
• (checkstyle depends on analysis-core)
• (dry depends on analysis-core)
• (findbugs depends on analysis-core)
• (tasks depends on analysis-core)
• (warnings depends on analysis-core)
• (pmd depends on analysis-core)
• php depends on pmd, analysis-core, dry, checkstyle

That plugin just "collects" other plugins and can be removed as well:

• DotCi-Plugins-Starter-Pack depends on pmd, analysis-core, findbugs, analysis-collector, checkstyle

These plugins look outdated and are not maintained anymore:

• codeclimate-plugin depends on analysis-core
• codescanner depends on analysis-core
• cpptest depends on analysis-core

I informed the following plugin authors about the end-of-life notice of analysis-core:

• brakeman depends on analysis-core
• CFLint depends on analysis-core
• swamp depends on analysis-core

So it might make sense to leave analysis-core active until I get an answer of the latter three plugins . But it would be helpful to archive the other ones that depend on analysis core. What do you think?

[jenkins-infra-bot]

danielbeck:

brakeman depends on analysis-core

Last normal release in mid 2017, since then only a security update. Would contact the maintainer about this.

CFLint depends on analysis-core

39 installs, last release 5 years ago. Would ignore.

swamp depends on analysis-core

Seems active, but just 18 reported installs should allow more flexibility in doing a major upgrade (e.g. integrating with warnings-ng instead).

---

With jenkinsci/jenkins#4073 additionally, it'll be more painful for users to keep such plugins around.

 

[jenkins-infra-bot]

drulli:

Yes, I pinged all three authors already. I'm not sure if we should wait for a reply...

[jenkins-infra-bot]

danielbeck:

Yes, I pinged all three authors already. I'm not sure if we should wait for a reply...

Any news here Ulli Hafner?

[jenkins-infra-bot]

drulli:

brakeman: see jenkinsci/brakeman-plugin#23 (I'm not sure if we can expect an implementation soon).
No feedback from the other two.

For me it would be ok to remove the plugin now.

[jenkins-infra-bot]

danielbeck:

Brakeman support exists in analysis-model 9.0.0 and newer, integrated into Warnings NG 8.4.2.

[jenkins-infra-bot]

danielbeck:

jenkins-infra/update-center2#466

[jenkins-infra-bot]

drulli:

Brakeman is now released in 8.5.0 warnings plugin.

[jenkins-infra-bot]

danielbeck:

jenkins-infra/update-center2#466

[jenkins-infra-bot]

[Originally related to: JENKINS-55744]

[dhruv070601]

fingbugs come under which plugin ?

[MarkEWaite]

fingbugs come under which plugin ?

What was "findbugs" is now "spotbugs" and is included in the Warnings plugin.