...
| issue tracking | description | |
|---|---|---|
| maven-archiver adds "Built-By: <username>" Manifest entry: the entry was removed | |
| META-INF/MANIFEST.MF | maven-archiver adds "Built-Jdk: <detailed java version>" Manifest entry: better replaced with "Built-Jdk: <java specification version>" |
META-INF/maven/$groupId/$artifactId/pom.properties | Timestamp in pom.properties | |
META-INF/maven/$groupId/$artifactId/pom.properties | Maven version in pom.properties | |
META-INF/maven/plugin.xml | generated plugin.xml is non-deterministic | |
META-INF/maven/plugin.xmlMETA-INF/maven/$groupId/$artifactId/plugin-help.xml | Timestamp in plugin.xml and plugin-help.xml descriptors generated by maven-plugin-tools-generator | |
| plexus-containers | META-INF/plexus/components.xml | sort components when generating META-INF/plexus/components.xml |
META-INF/MANIFEST.MF | "Private-Package" manifest entry content (created by felix:bundle) has not the same order between builds | |
| sisu-maven-plugin PR#5 | META-INF/sisu/javax.inject.Named | META-INF/sisu/javax.inject.Named content (created by sisu-maven-plugin) has non reproducible order for content |
| zip entries timestamp and order | ||
| COMPRESS-485 | keep entries order when gathering ParallelScatterZipCreator | |
| plexus-archiver issue #48, PR #49 | avoid timestamp issues in archives created by plexus-archiver (widely used in Maven plugins creating jar, zip, war, tar... archives) | |
support SOURCE_DATE_EPOCH environment variable or equivalent: see https://reproducible-builds.org/docs/timestamps/ | ||
| MSOURCES-120 | apply reproducible zip (entries order and timestamp) to maven-source-plugin | |
| MJAR-263 | apply reproducible zip (entries order and timestamp) to maven-jar-plugin | |
| issues fixed in maven-archiver will have to be picked by 9 other plugins managed by Apache Maven team (acr, ear, ejb, jlink, rar, war, site, javadoc, assembly) and perhaps other plugins managed outside Apache Maven team | ||
...