We avoid any snapshot or 'reanges' in our releases, everything is versioned. We also generate the Site report with it's dependency report which we find quite comprehensive. So from our point of view we haven't had any issues with reproducibility as is.
We do also capture severy depency plugin reports during the build but they are for diagnostic purposes only and not reproducibility. =========================== Curtis Yanko UHGIT Computer Services - ADIS Continuous Integration w860.702.9059 -----Original Message----- From: Weber, Stephan [mailto:stephan.we...@sap.com] Sent: Thursday, January 07, 2010 9:35 AM To: users@maven.apache.org Subject: reproducible builds with maven Hi! 1.) to reproduce a maven build where poms contain intervals for dependencies it would be nice to have a list of ALL used dependencies and versions - even the used maven plugins and versions. We played around with the dependency plugin: We start with an empty local repo. After a mvn clean install we have many more artifacts and plugins in the local repo than are reported by the dependency plugin. How can we generate a complete 'used-deps-list'? 2.) Later we want to feed that used-deps-list into a maven call which shall reproduce the old build. We assume that all used old versions of dependencies and plugins are still in the repositories (our nexus). But very likely there are already newer versions which we don't want to use, too. Maven should be able to use the previously generated 'used-deps-list' as a white list filter: only the versions in the list will be used. More, Maven itself shall only use maven plugin versions which are in the list, too. Any newer versions must not be used. Is there someone already working on a similar reproducibility approach? Any suggestions? Many thanks, Stephan This e-mail, including attachments, may include confidential and/or proprietary information, and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
