[SM-5021] fix Reproducible Builds issue for generate-depends

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: depends-maven-plugin-1.5.0
• Component/s: tooling
• Assignee: Jean-Baptiste Onofré
• Reporter: Herve Boutemy
• Created: 03/Feb/22 13:50
• Updated: 29/Aug/24 07:40
• Resolved: 15/Jan/23 09:37

Description

generated depends.txt contains a timestamp, which makes the output not reproducible

https://github.com/apache/servicemix-maven-plugins/blob/master/depends-maven-plugin/src/main/java/org/apache/servicemix/tooling/depends/GenerateDependsFileMojo.java#L175

Issue Links

• blocks: SLING-11875 make sling event reproducible
• blocks: OAK-10320 non-reproducible build due to org.apache.servicemix.tooling:depends-maven-plugin:1.4.0
• is depended upon by: KARAF-7638 remove non-reproducible timestamp
• is related to: XBEAN-335 non-reproducible timestamp in generated META-INF/spring.*
• is related to: MARTIFACT-32 Add new plugins issues/fixes
• is required by: SLING-11907 Update depends-maven-plugin to 1.5.0 (reproducible builds)
• relates to: SM-5437 make servicemix depends-maven-plugin build reproducible
• links to: GitHub Pull Request #10
• links to: GitHub Pull Request #10
• links to: GitHub Pull Request #21
• links to: PR #5