[SHIRO-884] fix source jar Reproducible Builds issue

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Resolved
• Affects Version/s: 1.9.1
• Fix Version/s: 2.0.0-alpha, 1.10.0
• Assignee: Francois Papon
• Reporter: Herve Boutemy
• Created: 29/Jun/22 06:05
• Updated: 29/Jun/22 10:03
• Resolved: 29/Jun/22 10:03

Description

found while rebuilding 1.9.1 release https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/shiro/README.md , fix from SHIRO-872 was incomplete because doc profile defines an old maven-source-plugin release

notice that once this stupid sources.jar issue is fixed, one issue remains: in shiro-config-ogdl-1.9.1-tests.jar, ReflectionBuilderTest.class is built from ReflectionBuilderTest.groovy: is there a reproducibility issue in Groovy compiler?

Issue Links

• is a child of: SHIRO-872 fix Reproducible Builds issues
• links to: GitHub Pull Request #365