avaje-inject icon indicating copy to clipboard operation
avaje-inject copied to clipboard

-javax releases are not reproducible

Open hboutemy opened this issue 10 months ago • 7 comments

see https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/io/avaje/inject/README.md

non -javax releases are perfectly checked as reproducible: build recipe is quite simple and classical, like https://github.com/jvm-repo-rebuild/reproducible-central/pull/1361

for -javax releases, the timestamp does not correspond as what is in Git, and there are additional .java-e files in -sources.jar that come from nowhere in Git, like https://github.com/jvm-repo-rebuild/reproducible-central/pull/1359

I don't know what is the release process for -javax builds in Maven Central, but it's not what I'd expect = simply start from Git tag, apply ./jakarta-to-javax.sh and rebuild to deploy: is there a deliberate reason? And in that case, how to generate the .java-e files?

hboutemy avatar Jan 07 '25 23:01 hboutemy