Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: plexus-containers #27 issue

...

issue trackingdescription
MSHARED-661 ((tick) maven-archiver 3.4.0)

META-INF/MANIFEST.MF

maven-archiver adds "Built-By: <username>" Manifest entry: the entry was removed

MSHARED-796 ((tick) maven-archiver-3.4.0)

META-INF/MANIFEST.MFmaven-archiver adds "Built-Jdk: <detailed java version>" Manifest entry: better replaced with "Built-Jdk: <java specification version>"
MSHARED-494 ((tick) maven-archiver 3.1.0)META-INF/maven/$groupId/$artifactId/pom.propertiesTimestamp in pom.properties
MSHARED-800 (tick)META-INF/maven/$groupId/$artifactId/pom.propertiesMaven version in pom.properties
MPLUGIN-261 ((tick) maven-plugin-plugin 3.3)META-INF/maven/plugin.xmlgenerated plugin.xml is non-deterministic
MPLUGIN-326 ((tick) maven-plugin-plugin 3.5.1)META-INF/maven/plugin.xml
META-INF/maven/$groupId/$artifactId/plugin-help.xml
Timestamp in plugin.xml and plugin-help.xml descriptors generated by maven-plugin-tools-generator
plexus-containers issue #8 ((tick) plexus-component-metadata 2.0.0)
META-INF/plexus/components.xmlsort components when generating META-INF/plexus/components.xml
plexus-containers issue #27META-INF/plexus/components.xmlsort components when merging discovered components with hand-provided components

META-INF/MANIFEST.MF

"Private-Package" manifest entry content (created by felix:bundle) has not the same order between builds

sisu-maven-plugin PR#5META-INF/sisu/javax.inject.Named

META-INF/sisu/javax.inject.Named content (created by sisu-maven-plugin) has non reproducible order for content

zip entries timestamp and order
COMPRESS-485 ((tick) commons-compress 1.19)keep entries order when gathering ParallelScatterZipCreator
plexus-archiver issue #48, PR #49 ((tick) plexus-archiver 4.2.0)avoid timestamp issues in archives created by plexus-archiver (widely used in Maven plugins creating jar, zip, war, tar... archives)
plexus-archiver issue #114 ((tick) plexus-archiver 4.2.0)To enable reproducible builds `AbstractArchiver#addFileSet` should add the files in order
support SOURCE_DATE_EPOCH environment variable or equivalent: see https://reproducible-builds.org/docs/timestamps/

remove variation based on user's umask on Unixes

remove variation based on uid/gid & userName/groupName in tar
MSOURCES-120apply reproducible zip (entries order and timestamp) to maven-source-plugin
MASSEMBLY-921apply reproducible archive (entries order and timestamp) to maven-assembly-plugin
MJAR-263apply reproducible zip (entries order and timestamp) to maven-jar-plugin
issues fixed in maven-archiver will have to be picked by 9 other plugins managed by Apache Maven team (acr, ear, ejb, jlink, rar, war, site, javadoc, assembly) and perhaps other plugins managed outside Apache Maven team

...