Team,

The GitHub Pull Request Builder (GHPRB) plugin will be removed from all Jenkins instances (ci-int, ci-ext, ci-stage) by end of March 2026. This is a security-driven change with no exceptions.

Why

The GHPRB plugin is deprecated, unmaintained, and contains known security vulnerabilities [1]. Continued use poses unacceptable risk to our infrastructure and blocks our ability to properly upgrade other Jenkins plugins due to shared dependencies.

Affected Jobs

Your service has the following Jenkins jobs that must be migrated:

• Name: quickstarts
  Job: RedHatInsights-quickstarts-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/quickstarts/build.yml

Migration Options

Option 1: Konflux (Preferred)

Migrate to Konflux for PR checks and builds. This aligns with Red Hat's CI/CD strategy [2].

Option 2: GitHub Branch Source Plugin

If you must remain on Jenkins, migrate to the GitHub Branch Source plugin. This replaces BOTH pr-check and build jobs with a single multibranch pipeline [3].

Key differences:

• Uses Jenkinsfile in your repository
• Single job handles PRs and branch builds
• Supports GitHub merge queues
• More secure permission model

Documentation: https://gitlab.cee.redhat.com/service/app-interface/-/tree/master/docs/app-sre/github-branch-source-plugin-jobs

Action Required

1. Review the affected jobs listed above
2. Choose migration path (Konflux or GitHub Branch Source)
3. Complete migration by March 31, 2026
4. A JIRA ticket will be created to track the migration of the jobs in your project. Please close it when the work is done.

Support

Questions? Reach out via [4].

[1] https://plugins.jenkins.io/ghprb/
[2] https://docs.engineering.redhat.com/display/KONFLUX/Konflux+Documentation
[3] https://plugins.jenkins.io/github-branch-source/
[4] https://gitlab.cee.redhat.com/service/app-interface/-/blob/master/FAQ.md#contacting-appsre

AppSRE Team