I need to obtain the latest tarballs Jira and Confluence, on-premise versions. They used to be available from the My Atlassian Licenses page. Now when I click on Download Source on a product we still have an active license for (just like always), I get empty pages adorned with a pair of messages:
A) The product you requested is not available. Please contact us if you have any questions about accessing the source code.
B) There are currently no source downloads available for your license. Please contact us for further details.
Where did the source downloads go? We canāt properly develop and maintain the addons and support customers without sourcesā¦
Our documentation still says my.atlassian.com is the right way to obtain source code. I havenāt seen any announcements here in the community or in the changelogs to indicate otherwise. It sounds like a mistake so I recommend following the advice in the messages; specifically, contact our customer support about āPricing, billing & licensingā.
Yes, Atlassians hid the source code some time ago. This is what support says: āā¦weāve temporarily restricted access to source code as a security measure in response to the recent advisory CVE-2023-22515 and weāll share any additional information as it becomes available.ā
Thanks for that update. I was not aware but it helped me search around to see if I could share more information. I did confirm this is the exact right path to get source code. In addition, one thing that can help your request get through is to link to your Marketplace vendor account and explain how you use the source code in development (I know it should seem obvious, but these procedures are not managed by Ecosystem or Server/Data Center engineering).
For now, Iāll leave this post open since this should be temporary. Iāll close when the source code is back to my.atlassian.com. Feel free to at-mention me if you have updates. That said, Iām not āin the loopā about this procedure so, please, no mentions to request status updates.
I fully understand that platform teams are not going to prioritise bringing back source code access to all customers, but not having access to source code really limits our ability to provide support to our mutual customers.
Fyi, as a last resort we can contact Atlassian support and request individual source downloads on a per product-basis. I did that recently with Jira 9.4.latest + 9.12.latest and Confluence 8.5.latest + 8.7.latest, and Atlassian Support uploaded the requested ZIPs on my support tickets in a matter of 1-2 days. Not ideal, but better than nothing.
Atlassian Support wonāt provide downloads these days unless you escalate and make a scene.
Atlassian: please note the text in the screenshot:
āYour license entitles you to the source for the period of your licenseā
That text has been there for 20 years. The whole developer ecosystem was bootstrapped off this openness and developer-friendliness. Donāt screw it up now. The āsecurityā explanation is completely implausible. In fact, itās security researchers in the Bug Bounty program who now canāt do their job. Then thereās people like me, who professionally support these apps, who need source to debug otherwise intractable problems.
Please fix source code access, or if itās gone for good, respect your partners, customers and own support staff by saying so.
Even then. I just experienced an interaction with Atlassian Support.
The party line seems to be that Atlassian will only provide those downloads within the scope of your active licenses (as it always has been). We used 10$ 10-user Server licenses as the means to access the Jira source tarballs upon which our product R&D depends. As of 2024 Feb 15, Server exits the picture, and even as an established vendor (plugins only, no license resales or Atlassian Expert / Partner qualification) with a history of making a trickle of money for Atlassian we are not eligible for source code access for Jira versions released after that dead-by date.
If our org is to receive continued access at this time, the only means I have thus identified thus far is for us to purchase the entry level Jira DC license, a 44,000 USD capital expenditure. Atlassian Experts appear to qualify for credits, but their business model is different from ours (VARs, SIers that resell licenses, who are credited depending on the Silver, Gold, etc. tier rankings their sales achieve).
Which begs the question: What is Atlassianās current vision for 3rd-party plugin development for Data Center?
You can request a developer license (see Marketplace Partner DC Developer Licenses) and use the SEN of the developer license to request source code access for the product
, that looks like the ticket!