From b9d07303717eea98d92044a0a983f1d40277a0ed Mon Sep 17 00:00:00 2001
From: Kevin Martens <99040580+kmartens27@users.noreply.github.com>
Date: Sat, 28 Sep 2024 06:02:13 -0400
Subject: [PATCH] 2.462.3 - Creating Changelog and Upgrade Guide (#7538)

Creating changelog & upgrade guide for 2.462.3
---
 content/_data/changelogs/lts.yml    | 58 +++++++++++++++++++++++++++++
 content/_data/upgrades/2-462-3.adoc |  6 +++
 2 files changed, 64 insertions(+)
 create mode 100644 content/_data/upgrades/2-462-3.adoc

diff --git a/content/_data/changelogs/lts.yml b/content/_data/changelogs/lts.yml
index 8451a7ef7a6e..95291b4857ce 100644
--- a/content/_data/changelogs/lts.yml
+++ b/content/_data/changelogs/lts.yml
@@ -11599,6 +11599,64 @@
     message: |-
       Fix <strong>New Item</strong> page layout if no icon is defined for an item (regression in 2.453).
 
+- version: "2.462.3"
+  date: 2024-10-02
+  changes:
+  - type: major bug
+    category: bug
+    pull: 9663
+    issue: 73692
+    authors:
+      - jglick
+    pr_title: "[JENKINS-73692] Turn off logging from BackgroundGlobalBuildDiscarder"
+    message: |-
+      No longer printing verbose and uninformative messages to <code>$JENKINS_HOME/logs/tasks/Periodic background build discarder.log</code>.
+  - type: rfe
+    category: rfe
+    authors:
+      - olamy
+    pr_title: "Upgrade to Winstone 6.22 and Jetty 10.0.24"
+    references:
+      - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.19
+        title: Winstone 6.19 release notes
+      - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.20
+        title: Winstone 6.20 release notes
+      - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.21
+        title: Winstone 6.21 release notes
+      - url: https://github.com/jenkinsci/winstone/releases/tag/winstone-6.22
+        title: Winstone 6.22 release notes
+      - url: https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.21
+        title: Jetty 10.0.21 release notes
+      - url: https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.22
+        title: Jetty 10.0.22 release notes
+      - url: https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.23
+        title: Jetty 10.0.23 release notes
+      - url: https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.24
+        title: Jetty 10.0.24 release notes
+      - pull: 9698
+      - issue: 73743
+    message: |-
+      Upgrade Winstone from 6.18 to 6.22.
+      Upgrade Jetty from 10.0.20 to 10.0.24.
+  - type: bug
+    category: bug
+    pull: 9641
+    issue: 73668
+    authors:
+      - mawinter69
+    pr_title: "[JENKINS-73668] fix styling of rowSelectionController dropdown"
+    message: |-
+      Fix the appearance of the <strong>Plugin Manager</strong> actions dropdown.
+  - type: bug
+    category: bug
+    pull: 9644
+    issue: 73422
+    authors:
+      - Dohbedoh
+    pr_title: "[JENKINS-73422] Add escape hatch for Authenticated user access to Resource URL"
+    message: |-
+      Add escape hatch for Authenticated user access to Resource URL.
+
 # DO NOT EDIT THIS FILE DIRECTLY
 # ALL CHANGES MUST GO THROUGH PULL REQUESTS
 # MALFORMED FILE CONTENTS WILL BREAK THE SITE BUILD
diff --git a/content/_data/upgrades/2-462-3.adoc b/content/_data/upgrades/2-462-3.adoc
new file mode 100644
index 000000000000..b0e34a5c6a2c
--- /dev/null
+++ b/content/_data/upgrades/2-462-3.adoc
@@ -0,0 +1,6 @@
+==== Adding an escape hatch for authenticated users
+
+Access to the Resource URL for authenticated users was previously removed in link:https://issues.jenkins.io/browse/JENKINS-72636[JENKINS-72636].
+However, with the release of 2.462.3, this functionality has been restored.
+To allow an authenticated user to access the Resource URL, add the system property `jenkins.security.ResourceDomainRootAction.allowAuthenticatedUser=false` on startup.
+This can also be done live by executing the groovy script `jenkins.security.ResourceDomainRootAction.ALLOW_AUTHENTICATED_USER = true`.
\ No newline at end of file