Plugin Modernizer Tool

Using OpenRewrite Recipes for Plugin Modernization or Automation Plugin Build Metadata Updates

Note

This tool is currently in development and looking for contributors and early adopters. Please report any issues or feature requests on the GitHub repository.

It's configuration and APIs might change in future releases

About

Plugin Modernizer is a generic CLI tool designed to automate the modernization of Jenkins plugins. It utilizes OpenRewrite recipes to apply transformations to the plugin, validating the applied transformations and creating pull requests with the results.

The CLI is also used to collect metadata from Jenkins plugins, such as the plugin's dependencies (including transitive) or JDKs used for building the plugin. Such metadata is planned to be integrated with existing Jenkins tooling such as

• Jenkins Plugin Site
• Jenkins stastistics
• Plugin Health Scoring

Learn more at this project page.

Usage

• Getting Started
  • Requirements to build
  • Build
  • Using the tool
  • Setup
• CLI Options
• Plugin Input Format
  • Plugin option
  • Plugin file option
• Configuring Environmental Variables
• Examples
  • without dry-run
  • with dry-run
  • with export-datatables

Getting Started

Requirements

• Maven version 3.9.7 or later, or mvnd
• Java 17 or Java 21

Build

mvn clean install

Using the tool

The CLI is distributed by Homebrew and can be installed using the following command

Ensure to have Jenkins infra tap

brew tap jenkins-infra/tap

Then install the plugin-modernizer-tool

brew install plugin-modernizer

Setup

This tool requires forking repositories from GitHub, so you need to set the GitHub token and GitHub owner as environment variables. Use either GH_TOKEN or GITHUB_TOKEN for the GitHub token, and either GH_OWNER or GITHUB_OWNER for the GitHub owner. Alternatively, you can pass the GitHub owner through the CLI option -g or --github-owner.

Your classic token should have the following scopes

• repo (Full control of private repositories)
• delete_repo (Delete repositories) (Only if using the --clean-forks option)

Note

The GitHub owner can be either a personal account or an organization.

The CLI also support GitHub app installation for CI scenario.

The app must be installed on the owner's and target account and a private key generated and downloaded in PEM format.

From there you need to save both ID of installation (found on URL)

https://github.com/organizations/<org>/settings/installations/<installation ID>

Subcommands

• validate: Validate the configuration and environment variables (work in progress)
• run: Run the modernization process
• dry-run: Run the modernization process in dry-run mode without forking or pushing changes
• build-metadata: Collect metadata for the given plugin and have them on the local cache
• recipes: List available recipes

Global option

• --debug: (optional) Enables debug mode. Defaults to false.

• --cache-path: (optional) Custom path to the cache directory. Defaults to ${user.home}/.cache/jenkins-plugin-modernizer-cli.

• --maven-home: (optional) Path to the Maven home directory. Required if both MAVEN_HOME and M2_HOME environment variables are not set. The minimum required version is 3.9.7.

• --clean-local-data (optional) Deletes the local plugin directory before running the tool.

• --version or -v: (optional) Displays the version of the Plugin Modernizer tool.

• --help or -h: (optional) Displays the help

GitHub options

• --github-owner or -g: (Mandatory or optional if using GitHub app authentication) GitHub owner for forked repositories. Can also be set via the environment variable GH_OWNER or GITHUB_OWNER. Default to owner of the GH_TOKEN.

• --github-app-id <app-id>: (optional) The GitHub application if using app authentication. Defaults to GH_APP_ID environment variable if set.

• --github-app-source-installation-id <installation-id>: (optional) The GitHub app installation id for forked repositories. Defaults GH_APP_SOURCE_INSTALLATION_ID environment variable if set.

• --github-app-target-installation-id <installation-id>: (optional) The GitHub app installation id for repositories. Defaults GH_APP_TARGET_INSTALLATION_ID environment variable if set.- --github-app-private-key <path-to-private-key>: (optional) or GH_APP_PRIVATE_KEY environment variable

Run option

• --plugins or -p: (optional) Name(s) of plugin directory cloned inside the test-plugins directory.

• --plugin-file or -f: (optional) Path to the text file that contains a list of plugins. (see example plugin file)

• --recipe or -r: (required) Name of recipe to apply to the plugins.

• --clean-forks (optional) Remove forked repositories before and after the modernization process. Might cause data loss if you have other changes pushed on those forks. Forks with open pull request targeting original repo are not removed to prevent closing unmerged pull requests.

• --jenkins-update-center: (optional) Sets main update center; will override JENKINS_UC environment variable. If not set via CLI option or environment variable, will default https://updates.jenkins.io/current/update-center.actual.json

• --jenkins-plugin-info: (optional) Set the URL for the Jenkins Plugin Info API. If not set via CLI option or environment variable, will default to https://updates.jenkins.io/current/plugin-versions.json

• --jenkins-plugins-stats-installations-url (optional) Set the URL for the Jenkins Plugins Stats installations API. If not set via CLI option or environment variable, will default to url in properties file

• --plugin-health-score-url (optional) Set the URL for the Plugin Health Score API. If not set via CLI option or environment variable, will default to https://plugin-health.jenkins.io/api/scores

• --github-api-url (optional) Set the URL for the GitHub API. If not set via CLI option or environment variable, will default to https://api.github.com. Automatically set if GH_HOST environment variable is set.

Plugin Input Format

Plugins can be passed to the CLI tool in two ways:

• Plugin option
• Plugin file option

Plugin option

Pass the plugin names directly using the -p or --plugins option. The expected input format for plugins is artifact ID.

plugin-modernizer --plugins git,git-client,jobcacher --recipe AddPluginsBom

Here, git, git-client, and jobcacher are plugin artifact IDs (also known as plugin names), while AddPluginsBom and AddCodeOwners are recipe names. For more details about available recipes, refer to the recipe_data.yaml file.

Plugin file option

Pass the path to a file that contains plugin names. The expected input format for plugins in the .txt file is artifact ID or artifact ID:version. See example plugin file

plugin-modernizer run --plugin-file path/to/plugin-file --recipe AddPluginsBom

Configuring Environmental Variables

• GITHUB_TOKEN or GH_TOKEN: (required) GitHub Token.

• GITHUB_OWNER or GH_OWNER: (required) GitHub username or organization name. Can also be passed through the CLI option -g or --github-owner.

• JENKINS_UC: (optional) Update Center URL. Can also be passed through the CLI option --jenkins-update-center.

• MAVEN_HOME or M2_HOME: (required) Path to Maven home directory. Can also be passed through the CLI option -m or --maven-home.

• CACHE_DIR: (optional) Path to cache directory. Can also be passed through the CLI option -c or --cache-path.

Examples

without dry-run

plugin-modernizer run --plugins git,git-client,jobcacher --recipe AddPluginsBom

The above command creates pull requests in the respective remote repositories after applying the changes.

with dry-run

plugin-modernizer run --plugins git,git-client,jobcacher --recipe AddPluginsBom --dry-run

The above command generates patch files instead of applying changes directly. These patch files are saved in /target/rewrite/rewrite.patch inside each plugin directory. No pull requests will be created.

Note

Enable dry-run to avoid opening pull requests in the remote repositories.

with export-datatables

plugin-modernizer dry-run --plugins git,git-client,jobcacher --recipe AddPluginsBom --export-datatables

The above command creates a report of the changes made through OpenRewrite in csv format. The report will be generated in target/rewrite/datatables inside the plugin directory.

See example generated files:

• RecipeRunStats.csv
• SourcesFileResults.csv

More about Openrewrite Data Tables

Running with Docker

You can use the Docker image supplied by this project to run the Plugin Modernizer Tool without needing to install Java or Maven on your local machine.

Prerequisites

• Docker installed on your machine.
• A GitHub token with the necessary scopes.
• A file named plugins.txt containing the list of plugins.

Of course, you don't need a plugins.txt file if you are using the --plugins option.

Example

Below is an example of how to use the Docker image with a local plugins.txt file.

docker run \
  -e GH_TOKEN=${GH_TOKEN} \
  -e GH_OWNER=${GH_OWNER} \
  -v $(pwd)/plugins.txt:/plugins.txt \
  ghcr.io/jenkins-infra/plugin-modernizer-tool:main \
  --plugin-file /plugins.txt --recipe AddCodeOwner

Explanation

• -e GH_TOKEN=${GH_TOKEN}: Passes the GitHub token as an environment variable.
• -e GH_OWNER=${GH_OWNER}: Passes the GitHub owner as an environment variable.
• -v $(pwd)/plugins.txt:/plugins.txt: Mounts the plugins.txt file from the current directory to the Docker container.
• ghcr.io/jenkins-infra/plugin-modernizer-tool:main: Specifies the Docker image to use.
• --plugin-file /plugins.txt: Specifies the path to the plugin file inside the Docker container.
• --recipe AddPluginsBom,: Specifies the recipe to apply.

This command will run the Plugin Modernizer Tool inside the Docker container using the specified environment variables and plugin file.

Reproducibility

The maven build should be reproducible

See

• https://maven.apache.org/guides/mini/guide-reproducible-builds.html
• https://reproducible-builds.org
• jenkinsci/incrementals-tools#103 for the support on the Jenkins incrementals tools and JEP-229

Reproducible Builds for more information.

Ensure the repository is clean before running the following commands (otherwise you can pass the -Dignore.dirty flag to the maven command).

mvn -Dset.changelist clean install
mvn -Dset.changelist -Dreference.repo=central clean verify artifact:compare

The property project.build.outputTimestamp will be set with the timestamp of the latest commit.

If you are using a mirror for central you should adapt the reference.repo property accordingly to match the id of the mirror in your settings.xml.

Contributing

Thanks to all our contributors! Check out our CONTRIBUTING file to learn how to get started.

How to debug recipes

Update the rewrite.yml into the src/test/resources/

Example

---
type: specs.openrewrite.org/v1beta/recipe
name: io.jenkins.tools.pluginmodernizer.Debug
displayName: Debug recipe
description: Debug recipe
conditions: []
recipeList: []

Then run openrewrite with the following command

mvn org.openrewrite.maven:rewrite-maven-plugin:dryRun -Drewrite.recipeArtifactCoordinates=org.openrewrite.recipe:rewrite-jenkins:0.19.0 -Drewrite.activeRecipes=io.jenkins.tools.pluginmodernizer.Debug

If you want to test with recipes from modernizer core

mvn org.openrewrite.maven:rewrite-maven-plugin:dryRun -Drewrite.recipeArtifactCoordinates=io.jenkins.plugin-modernizer:plugin-modernizer-core:999999-SNAPSHOT -Drewrite.activeRecipes=io.jenkins.tools.pluginmodernizer.Debug

References

• GSoC 2024 Project Proposal
• Project Slack Channel
• OpenRewrite Jenkins Recipes
• OpenRewrite LST