[Git][reproducible-builds/reproducible-website][master] 2019-12: more Maven related results at the summit in Marrakesh

Holger Levsen gitlab at salsa.debian.org
Wed Dec 18 22:56:16 UTC 2019



Holger Levsen pushed to branch master at Reproducible Builds / reproducible-website


Commits:
a98265e5 by Holger Levsen at 2019-12-18T22:56:04Z
2019-12: more Maven related results at the summit in Marrakesh

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- _reports/2019-12.md


Changes:

=====================================
_reports/2019-12.md
=====================================
@@ -76,12 +76,23 @@ reproducible which raised the amount of reproducible packages by 1.5%. For examp
 * mattia did some maintenance work on the reproducible builds database to convert timestamps from strings to real timestamps data types
 * mattia renamed the Arch Linux suites from `archlinux_$suite` to `$suite`.
 
+* maven:
+  Hervé Boutemy wrote in Message-ID: <3067075.YCjHTnBDQv at giga> on rb-general:
+  "I just launched a vote for Maven Release Plugin 3.0.0-M1 with instructions on how to check that this build is as reproducible as I expect it to be. Don't hesitate to check and vote on the release: https://lists.apache.org/thread.html/db3dea44d827d0a5cc557407d4cfe69b4304475f6e41030517aea29e%40%3Cdev.maven.apache.org%3E - Thanks for your help to make in the future Reproducible Builds a normal feature for any Java project published to Maven Central."
+  Hans-Christoph Steiner added in Message-ID: <6ce61db3-af20-df3a-fe93-bebee7b04e7f at guardianproject.info>
+  "After working with Maven and Bazel devs at the summit,  I wanted to follow up to keep the buildinfo work moving.  I have buildinfo generation working with gradle, and it is now working in Maven plugins. I'd heard it was working with Bazel, but I haven't seen it yet.
+  The JARs produced with Maven and Gradle now only differ in the sort order of files in the ZIP header.  `mvn deploy` even pushes the buildinfo file to the maven repo: https://gitlab.com/eighthave/jtorctl/-/packages/59404
+  In this process, I found a small bug in maven archiver, which puts the META-INF/ dir entry after the META-INF/MANIFEST.MF entry in the ZIP: https://issues.apache.org/jira/browse/MSHARED-849"
+  Later he added in Message-ID: <7c8245e1-8b57-368e-a09a-00f1de0c3fce at guardianproject.info>
+  "More progress!  The jtorctl library that we hacked on in Marrakesh is now published using Maven with a .buildinfo file: https://repo1.maven.org/maven2/info/guardianproject/jtorctl/0.4/"
+
 * summit reports / tweets / blogposts / commits
     * https://twitter.com/JANieuwenhuizen/status/1017497499089633280
     * https://twitter.com/h4nnes/status/1204347645206126592
     * https://guix.gnu.org/blog/2019/reproducible-builds-summit-5th-edition/
 
 
+
 #### unsorted
 
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/a98265e58386dc8438fff23b2aa7373a3e8644c2

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/a98265e58386dc8438fff23b2aa7373a3e8644c2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20191218/c659dee8/attachment.htm>


More information about the rb-commits mailing list