[MSHADE-420] Reproducible Builds timestamp issue in some cases

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.4
• Fix Version/s: 3.5.2
• Assignee: Herve Boutemy
• Reporter: Herve Boutemy
• Created: 04/May/22 06:13
• Updated: 13/Apr/24 07:24
• Resolved: 31/Jan/24 17:57

Description

seen in Tika https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/tika/tika-2.4.0.diffoscope

maven-shade-plugin 3.2.4 has an issue with timestamps in unexplained circumstances:
why does 21-Nov-20 20:25 from reference become 21-Nov-21 01:25 in rebuild?
why does 20-May-14 07:15 from reference become 20-May-14 11:15 in rebuild?
could be related to the timezone of the rebuilder?

21 / 44 target/reference/tika-parser-nlp-package-2.4.0.jar tika-parsers/tika-parsers-ml/tika-parser-nlp-package/target/tika-parser-nlp-package-2.4.0.jar
--- target/reference/tika-parser-nlp-package-2.4.0.jar
+++ tika-parsers/tika-parsers-ml/tika-parser-nlp-package/target/tika-parser-nlp-package-2.4.0.jar
├── zipinfo {}
│ @@ -9868,1231 +9868,1231 @@
│  -rw----     2.0 fat      932 bl defN 22-Apr-08 17:41 schemas/wsdl/xmime.xsd
│  -rw----     2.0 fat     5840 bl defN 22-Apr-08 17:41 schemas/wsdl/xml.xsd
│ --rw----     2.0 fat        0 bl defN 21-Nov-20 20:25 META-INF/maven/com.fasterxml.woodstox/
│ --rw----     2.0 fat        0 bl defN 21-Nov-20 20:25 META-INF/maven/com.fasterxml.woodstox/woodstox-core/
│ --rw----     2.0 fat       70 bl defN 21-Nov-20 20:25 META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties
│ --rw----     2.0 fat    15917 bl defN 21-Nov-20 20:25 META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.xml
...
│ --rw----     2.0 fat      722 bl defN 20-May-14 07:15 org/codehaus/stax2/validation/XMLValidationSchema.class
│ --rw----     2.0 fat     7795 bl defN 20-May-14 07:15 org/codehaus/stax2/validation/XMLValidationSchemaFactory.class
│ --rw----     2.0 fat     1801 bl defN 20-May-14 07:15 org/codehaus/stax2/validation/XMLValidator.class
│ +-rw----     2.0 fat        0 bl defN 21-Nov-21 01:25 META-INF/maven/com.fasterxml.woodstox/
│ +-rw----     2.0 fat        0 bl defN 21-Nov-21 01:25 META-INF/maven/com.fasterxml.woodstox/woodstox-core/
│ +-rw----     2.0 fat       70 bl defN 21-Nov-21 01:25 META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties
│ +-rw----     2.0 fat    15917 bl defN 21-Nov-21 01:25 META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.xml
...
│ +-rw----     2.0 fat      722 bl defN 20-May-14 11:15 org/codehaus/stax2/validation/XMLValidationSchema.class
│ +-rw----     2.0 fat     7795 bl defN 20-May-14 11:15 org/codehaus/stax2/validation/XMLValidationSchemaFactory.class
│ +-rw----     2.0 fat     1801 bl defN 20-May-14 11:15 org/codehaus/stax2/validation/XMLValidator.class
│  -rw----     2.0 fat        0 bl defN 21-Sep-14 14:41 META-INF/maven/org.apache.ws.xmlschema/
│  -rw----     2.0 fat        0 bl defN 21-Sep-14 14:41 META-INF/maven/org.apache.ws.xmlschema/xmlschema-core/
│  -rw----     2.0 fat      146 bl defN 21-Sep-14 14:41 META-INF/maven/org.apache.ws.xmlschema/xmlschema-core/pom.properties
│  -rw----     2.0 fat     6857 bl defN 21-Sep-14 14:41 META-INF/maven/org.apache.ws.xmlschema/xmlschema-core/pom.xml

Issue Links

• is related to: MARTIFACT-32 Add new plugins issues/fixes
• is superceded by: MSHADE-471 still timestamp issues with timezones (DST)
• relates to: MSHADE-352 shaded jars are not reproducible when using transformer
• relates to: MSHADE-347 Reproducible Builds: make entries in output jar files reproducible
• links to: GitHub Pull Request #179