Re: Reproducible Builds for Maven

2019-09-24 Thread Mark Derricutt
On 24 Sep 2019, at 23:37, Tomo Suzuki wrote: > versions, rather than ranges. Would you share the background why your tool > records the ranges? The full examples is at: https://github.com/HalBuilder/halbuilder-support-4.x/blob/master/pom.deps It resolves the locked down versions, but also ret

Re: Reproducible Builds for Maven

2019-09-24 Thread Mark Derricutt
Oh right! I missed the second half of our pom.deps file:    blacklisted org.hibernate:hibernate-ehcache:4.2.19.Final from smx3:smx3.bill-of-materials:2.1.1;    deprecated org.hibernate:hibernate-search-engine:4.4.0.Final from smx3:smx3.bill-of-materials:2.1.1;    resolved org.hibernate:hibernat

Re: Reproducible Builds for Maven

2019-09-24 Thread Tomo Suzuki
Hi Mark, Thank you for response. > resolve highest org.jetbrains:annotations:[16.0.3,17.0.0) via public; For reproducible builds, I expected the lock file contains specific versions, rather than ranges. Would you share the background why your tool records the ranges? -- Regards, Tomo