Uploaded image for project: 'Maven Shade Plugin'
  1. Maven Shade Plugin
  2. MSHADE-347

Reproducible Builds: make entries in output jar files reproducible

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.2.1
    • 3.2.2
    • None

    Description

      since a jar file is a zip file, entries order and timestamp are a natural source of non Reproducible Builds: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318

      need to keep timestamp of input zip entries into output

      Attachments

        Issue Links

          fixes

          New Feature - A new feature of the product, which has yet to be developed. MSHADE-249 Consistent dates in the jar entries

          • Major - Major loss of function.
          • Closed
          Is contained by

          New Feature - A new feature of the product, which has yet to be developed. MNG-6276 Support Reproducible Builds (https://reproducible-builds.org)

          • Major - Major loss of function.
          • Closed
          is depended upon by

          Improvement - An improvement or enhancement to an existing feature or task. MPOM-240 upgrade maven-shade-plugin to 3.2.2 to get Reproducible Builds for shaded artifacts

          • Major - Major loss of function.
          • Closed
          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. MSHADE-334 reproducible build

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. MSHADE-352 shaded jars are not reproducible when using transformer

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MSHADE-420 Reproducible Builds timestamp issue in some cases

          • Major - Major loss of function.
          • Closed
          is required by

          Improvement - An improvement or enhancement to an existing feature or task. MGPG-77 Make build Reproducible

          • Major - Major loss of function.
          • Closed
          relates to

          New Feature - A new feature of the product, which has yet to be developed. ARCHETYPE-590 support Reproducible Builds for archetype:jar

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MJAR-263 Reproducible Builds: make entries in output jar files reproducible (order + timestamp)

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MWAR-432 Reproducible Builds: make entries in output jar files reproducible (order + timestamp)

          • Major - Major loss of function.
          • Closed

          Activity

            People

              hboutemy Herve Boutemy
              hboutemy Herve Boutemy
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: