fix(jenkins): resolve startup crash after upgrade to 2.555.1 (#2169)

Three changes to fix Jenkins failing to start with JCasc after the
2.541.3 → 2.555.1 LTS upgrade:

1. Remove `excludeClientIPFromCrumb` from crumbIssuer config in
   jenkins.yaml — this attribute was removed from DefaultCrumbIssuer
   in newer Jenkins, causing a fatal JCasc init failure on every start.

2. Update plugin-util-api to 7.1330.v47b_46ee2047a_ and echarts-api to
   6.0.0-1279.v4e95ca_f54783 — coverage 3.x transitively requires these
   newer versions; the mismatch was silently swallowed by Docker build
   cache in CI but caused runtime plugin loading failures.

3. Add docker log capture step to plugin_update.yml so future startup
   failures surface the actual error instead of just an exit code.

Validated locally: Jenkins 2.555.1 starts cleanly with this config.

Signed-off-by: Bruno Verachten <gounthar@gmail.com>

Author: gounthar

.github/workflows/plugin_update.yml

@@ -74,3 +74,12 @@ jobs:
               # Create pull request using gh command
               gh pr create --title "chore(jenkins): Updates Jenkins plugins" --body "This pull request updates the Jenkins plugins listed in \`plugins.txt\`." --base "$BASE_BRANCH" --head "$BRANCH_NAME"
           fi
+
+      - name: Capture Jenkins logs on failure
+        if: failure()
+        run: |
+          echo "=== Container status ==="
+          docker ps -a
+          echo "=== Jenkins controller logs ==="
+          CTRL=$(docker ps -a --format "{{.Names}}" | grep controller | head -1)
+          [ -n "$CTRL" ] && docker logs "$CTRL" 2>&1 | tail -200 || echo "No controller container found"

dockerfiles/jenkins.yaml

@@ -13,8 +13,7 @@ jenkins:
           password: "admin"
   authorizationStrategy: loggedInUsersCanDoAnything
   crumbIssuer:
-    standard:
-      excludeClientIPFromCrumb: false
+    standard: {}
   nodes:  
   - permanent:
       labelString: "docker jenkins agent"
@@ -23,7 +22,8 @@ jenkins:
           credentialsId: "jenkins-ssh-agent-private-key"
           host: "desktop-jenkins_agent-1"
           port: 22
-          sshHostKeyVerificationStrategy: "nonVerifyingKeyVerificationStrategy"
+          sshHostKeyVerificationStrategy:
+            nonVerifyingKeyVerificationStrategy: {}
       name: "docker-ssh-jenkins-agent"
       nodeDescription: "ssh jenkins docker agent "
       remoteFS: "/home/jenkins/agent"

dockerfiles/plugins.txt

@@ -16,7 +16,7 @@ credentials-binding:719.v80e905ef14eb_
 credentials:1502.v5c95e620ddfe
 display-url-api:2.217.va_6b_de84cc74b_
 durable-task:664.v2b_e7a_dfff66c
-echarts-api:6.0.0-1273.v36fc9fe89332
+echarts-api:6.0.0-1279.v4e95ca_f54783
 font-awesome-api:7.2.0-983.v3f63c34eddb_9
 git-client:6.6.0
 git:5.10.1
@@ -57,7 +57,7 @@ pipeline-stage-step:345.va_96187909426
 pipeline-stage-tags-metadata:2.2277.v00573e73ddf1
 pipeline-stage-view:2.40
 plain-credentials:199.v9f8e1f741799
-plugin-util-api:7.1320.v684dd26fca_19
+plugin-util-api:7.1330.v47b_46ee2047a_
 resource-disposer:0.25
 scm-api:728.vc30dcf7a_0df5
 script-security:1399.ve6a_66547f6e1