[Bug 66644] Make Apache POI binaries reproducible

2023-07-03 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 --- Comment #5 from PJ Fanning --- added r1910760 -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail:

[Bug 66644] Make Apache POI binaries reproducible

2023-06-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 --- Comment #4 from PJ Fanning --- We can live without that DSTAMP in the Version.java template. With xmlbeans, I created a new buildinfo file that gets published separately to Maven. See last June 17-19 commits in

[Bug 66644] Make Apache POI binaries reproducible

2023-06-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 --- Comment #3 from Dominik Stadler --- FYI, a simple re-build did not show any difference when using diffoscope: for i in `find build -name *.jar`;do echo $i `basename $i`;diffoscope --progress --text - $i /tmp/`basename $i`;done

[Bug 66644] Make Apache POI binaries reproducible

2023-06-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 --- Comment #2 from PJ Fanning --- I added r1910364 That is just the tip of the iceberg because we will now need to go through all the jars and see what happens after clean builds - if the jars are the same or if they are different and what

[Bug 66644] Make Apache POI binaries reproducible

2023-06-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 --- Comment #1 from PJ Fanning --- In Gradle, we have https://docs.gradle.org/current/userguide/working_with_files.html#sec:reproducible_archives Enabling the configs seems relatively easy. Then, we will need to see if the output jars are

[Bug 66644] Make Apache POI binaries reproducible

2023-06-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66644 Dominik Stadler changed: What|Removed |Added OS||All Severity|normal