[ https://issues.apache.org/jira/browse/XMLBEANS-638?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17732728#comment-17732728 ]
PJ Fanning commented on XMLBEANS-638: ------------------------------------- [~centic] I tested out the Gradle changes to enable reproducible builds in xmlbeans first - because it is a simpler build than POI. The xmlbeans jar now only has one fixable issue. We stick a few build settings in the MANIFEST.MF including the username, the timestamp, the JDK used, etc. These will have to be removed. I'll need to read up on Gradle to see if there is a way to produce a `.buildinfo` file that we can publish to Maven with the jar. This seems to be becoming a bit of a standard. sbt (a Scala build tool) does this by default. You'll see an example here - https://repository.apache.org/content/groups/snapshots/org/apache/pekko/pekko-actor_3/0.0.0+26705-97cf472a-SNAPSHOT/ > make gradle build produce reproducible jars > ------------------------------------------- > > Key: XMLBEANS-638 > URL: https://issues.apache.org/jira/browse/XMLBEANS-638 > Project: XMLBeans > Issue Type: Task > Reporter: PJ Fanning > Priority: Major > Fix For: Version 5.1.2 > > Time Spent: 10m > Remaining Estimate: 0h > > See https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org