...
issue tracking | description | |
---|---|---|
| maven-archiver adds "Built-By: <username>" Manifest entry: the entry was removed | |
| META-INF/MANIFEST.MF | maven-archiver adds "Built-Jdk: <detailed java version>" Manifest entry: better replaced with "Built-Jdk: <java specification version>" |
META-INF/maven/$groupId/$artifactId/pom.properties | Timestamp in pom.properties | |
META-INF/maven/$groupId/$artifactId/pom.properties | Maven version in pom.properties | |
META-INF/maven/plugin.xml | generated plugin.xml is non-deterministic | |
META-INF/maven/plugin.xml META-INF/maven/$groupId/$artifactId/plugin-help.xml | Timestamp in plugin.xml and plugin-help.xml descriptors generated by maven-plugin-tools-generator | |
plexus-containers | META-INF/plexus/components.xml | sort components when generating META-INF/plexus/components.xml |
META-INF/MANIFEST.MF | "Private-Package" manifest entry content (created by felix:bundle) has not the same order between builds | |
sisu-maven-plugin PR#5 | META-INF/sisu/javax.inject.Named | META-INF/sisu/javax.inject.Named content (created by sisu-maven-plugin) has non reproducible order for content |
zip entries timestamp and order | ||
plexus-archiver issue #48 | avoid timestamp issues in archives created by plexus-archiver (widely used in Maven plugins creating jar, zip, war, tar... archives) | |
sort zip entries to make zip entries order reproducible | ||
support SOURCE_DATE_EPOCH environment variable or equivalent: see https://reproducible-builds.org/docs/timestamps/ | ||
MSOURCES-120 | apply reproducible zip (entries order and timestamp) to maven-source-plugin | |
MJAR-263 | apply reproducible zip (entries order and timestamp) to maven-jar-plugin | |
issues fixed in maven-archiver will have to be picked by 9 other plugins managed by Apache Maven team (acr, ear, ejb, jlink, rar, war, site, javadoc, assembly) and perhaps other plugins managed outside Apache Maven team |
...