[ 
https://issues.apache.org/jira/browse/XMLBEANS-638?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17732728#comment-17732728
 ] 

PJ Fanning commented on XMLBEANS-638:
-------------------------------------

[~centic] I tested out the Gradle changes to enable reproducible builds in 
xmlbeans first - because it is a simpler build than POI.

The xmlbeans jar now only has one fixable issue. We stick a few build settings 
in the MANIFEST.MF including the username, the timestamp, the JDK used, etc. 
These will have to be removed.

I'll need to read up on Gradle to see if there is a way to produce a 
`.buildinfo` file that we can publish to Maven with the jar. This seems to be 
becoming a bit of a standard. sbt (a Scala build tool) does this by default.

You'll see an example here - 
https://repository.apache.org/content/groups/snapshots/org/apache/pekko/pekko-actor_3/0.0.0+26705-97cf472a-SNAPSHOT/

> make gradle build produce reproducible jars
> -------------------------------------------
>
>                 Key: XMLBEANS-638
>                 URL: https://issues.apache.org/jira/browse/XMLBEANS-638
>             Project: XMLBeans
>          Issue Type: Task
>            Reporter: PJ Fanning
>            Priority: Major
>             Fix For: Version 5.1.2
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> See https://bz.apache.org/bugzilla/show_bug.cgi?id=66644



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org

Reply via email to