[FELIX-6404] bundle:bundle:5.1.2 add non-reproducible Built-By and Build-Jdk to MANIFEST.MF

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: maven-bundle-plugin-5.1.2
• Fix Version/s: maven-bundle-plugin-5.1.3
• Component/s: Maven Bundle Plugin
• Assignee: Jean-Baptiste Onofré
• Reporter: Herve Boutemy
• Created: 24/Apr/21 20:12
• Updated: 10/Nov/21 12:55
• Resolved: 10/Nov/21 12:55

Description

with configuration defined in FELIX-6304, builds were reproducible with plugin 5.1.1

but upgrading plugin to 5.1.2 added 2 new entries to MANIFEST.MF that are not reproducible:

Build-Jdk: 11.0.11
Built-By: my_username

instead of previous

Build-Jdk-Spec: 11

this is what is causing the reproducibility regression for Dropwizard-metrics from 4.1.18 to 4.1.19 https://github.com/jvm-repo-rebuild/reproducible-central#io.dropwizard.metrics:metrics-parent

Issue Links

• is broken by: FELIX-6312 Maven Bundle Plugin removes entries from manifest since version 5
• supercedes: FELIX-6304 bundle:bundle generates non-reproducible JAR archives (timestamps)
• links to: GitHub Pull Request #115